Dynamic security labels and noninterference: Extended Abstract

IFIP Advances in Information and Communication Technology

Volumn 173, Issue , 2005, Pages 27-40

  Zheng, Lantian ^a   Myers, Andrew C ^a  

^a Department of Obstetrics Gynecology   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DIFFERENTIATION (CALCULUS);

ACCESS PERMISSIONS; CONTROL INFORMATION; DATA CONFIDENTIALITY; EXTENDED ABSTRACTS; INFORMATION FLOW POLICIES; INFORMATION FLOWS; STRONG SECURITIES; TYPED LAMBDA CALCULUS;

DYNAMICS;

EID: 84902458958     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: None     Document Type: Conference Paper

References (29)

1. Johan Agat. Transforming out timing leaks. In Proc. 27th ACM Symp. on Principles of Programming Languages (POPL), pages 40-53, Boston, MA, January 2000.
2. Anindya Banerjee and David A. Naumann. Secure information flow and pointer confinement in a Java-like language. In IEEE Computer Security Foundations Workshop (CSFW), June 2002.
3. Anindya Banerjee and David A. Naumann. Using access control for secure information flow in a java-like language. In Proc. 16th IEEE Computer Security Foundations Workshop, pages 155-169, June 2003.
4. Dorothy E. Denning. Cryptography and Data Security. Addison-Wesley, Reading, Massachusetts, 1982.
5. Dorothy E. Denning and Peter J. Denning. Certification of programs for secure information flow. Comm, of the ACM, 20(7):504-513, July 1977.
6. Department of Defense. Department of Defense Trusted Computer System Evaluation Criteria, DOD 5200.28-STD (The Orange Book) edition, December 1985.
7. Simon Foley, Li Gong, and Xiaolei Qian. A security model of dynamic labeling providing a tiered approach to verification. In IEEE Symposium on Security and Privacy, pages 142-154, Oakland, CA, 1996. IEEE Computer Society Press.
8. Joseph A. Goguen and Jose Meseguer. Security policies and security models. In Proc. IEEE Symposium on Security and Privacy, pages 11-20, April 1982.
9. Nevin Heintze and Jon G. Riecke. The SLam calculus: Programming with secrecy and integrity. In Proc. 25th ACM Symp. on Principles of Programming Languages (POPL), pages 365-377, San Diego, California, January 1998.
10. John McLean. The algebra of security. In IEEE Symposium on Security and Privacy, pages 2-7, Oakland, California, 1988.
11. Catherine Meadows. Policies for dynamic upgrading. In Database Security, IV: Status and Prospects, pages 241-250. North Holland, 1991.
12. John C. Mitchell. Foundations for Programming Languages. The MIT Press, Cambridge, Massachusetts, 1996.
13. Andrew C. Myers. JFlow: Practical mostly-static information flow control. In Proc. 26th ACM Symp. on Principles of Programming Languages (POPL), pages 228-241, San Antonio, TX, January 1999.
14. Andrew C. Myers and Barbara Liskov. A decentralized model for information flow control. In Proc. 17th ACM Symp. on Operating System Principles (SOSP), pages 129-142, Saint-Malo, France, 1997.
15. Andrew C. Myers, Lantian Zheng, Steve Zdancewic, Stephen Chong, and Nathaniel Nystrom. Jif: Java information flow. Software release. Located at http://www.es.Cornell, edu/jif, July 2001-2003.
16. Jens Palsberg and Peter Ørbæk. Trust in the λ-calculus. In Proc. 2nd International Symposium on Static Analysis, number 983 in Lecture Notes in Computer Science, pages 314-329. Springer, September 1995.
17. François Pottier and Vincent Simonet. Information flow inference for ML. In Proc. 29th ACM Symp. on Principles of Programming Languages (POPL), pages 319-330, 2002.
18. Andrei Sabelfeld and Heiko Mantel. Static confidentiality enforcement for distributed programs. In Proceedings of the 9th International Static Analysis Symposium, volume 2477 of LNCS, Madrid, Spain, September 2002. Springer-Verlag.
19. Andrei Sabelfeld and Andrew Myers. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, 21(1):5-19, January 2003.
20. Ravi S. Sandhu and Sushil Jajodia. Honest databases that can keep secrets. In Proceedings of the 14th National Computer Security Conference, Washington, DC, 1991.
21. Ian Sutherland, Stanley Perlo, and Rammohan Varadarajan. Deducibility security with dynamic level assignments. In Proc. 2nd IEEE Computer Security Foundations Workshop, Franconia, NH, June 1989.
22. Stephen Tse and Steve Zdancewic. Run-time principals in information-flow type systems. In IEEE Symposium on Security and Privacy, Oakland, CA, May 2004.
23. Dennis Volpano, Geoffrey Smith, and Cynthia Irvine. A sound type system for secure flow analysis. Journal of Computer Security, 4(3): 167-187, 1996.
24. Clark Weissman. Security controls in the ADEPT-50 time-sharing system. In AFIPS Conference Proceedings, volume 35, pages 119-133, 1969.
25. John P. L. Woodward. Exploiting the dual nature of sensitivity labels. In IEEE Symposium on Security and Privacy, pages 23-30, Oakland, California, 1987.
26. Hongwei Xi and Frank Pfenning. Dependent types in practical programming. In Proc. 26th ACM Symp. on Principles of Programming Languages (POPL), pages 214-227, San Antonio, TX, January 1999.
27. Steve Zdancewic and Andrew C. Myers. Secure information flow via linear continuations. Higher Order and Symbolic Computation, 15(2-3):209-234, September 2002.
28. Steve Zdancewic and Andrew C. Myers. Observational determinism for concurrent program security. In Proc. 16th IEEE Computer Security Foundations Workshop, pages 29-43, Pacific Grove, California, June 2003.
29. Lantian Zheng and Andrew C. Myers. Dynamic security labels and noninterference. Technical Report 2004-1924, Cornell University Computing and Information Science, 2004.