Type-based distributed access control

Proceedings of the Computer Security Foundations Workshop

Volumn 2003-January, Issue , 2003, Pages 170-184

  Chothia, T ^a   Duggan, D ^a   Vitek, J ^b  

^a Stevens Institute of Technology   (United States)

^b Purdue University   (United States)

Author keywords

Access control; Communication system control; Communication system security; Computer networks; Computer science; Cryptography; Data security; Distributed control; Dynamic programming; Middleware

Indexed keywords

COMPUTER CONTROL SYSTEMS; COMPUTER NETWORKS; COMPUTER PROGRAMMING; COMPUTER SCIENCE; COMPUTER SYSTEMS PROGRAMMING; CRYPTOGRAPHY; DISTRIBUTED COMPUTER SYSTEMS; DISTRIBUTED PARAMETER CONTROL SYSTEMS; DYNAMIC PROGRAMMING; MIDDLEWARE; SECURITY OF DATA; SECURITY SYSTEMS;

COMMUNICATION SYSTEM CONTROL; COMMUNICATION SYSTEM SECURITY; CRYPTOGRAPHIC OPERATIONS; DISTRIBUTED ACCESS CONTROLS; DISTRIBUTED CONTROL; ENCRYPTED DATA; INFORMATION FLOW CONTROL; SECURE NETWORKS;

ACCESS CONTROL;

EID: 84942244044     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.2003.1212712     Document Type: Conference Paper

References (37)

1. M. Abadi. Security by typing in security protocols. In Theoretical Aspects of Computer Science, pages 611-638, 1997.
2. M. Abadi and B. Blanchet. Analyzing security protocols with secrecy types and logic programs. In Proceedings of ACM Symposium on Principles of Programming Languages, pages 33-44, 2002.
3. M. Abadi and C. Fournet. Access control based on execution history. In Proceedings of the 10th Annual Network and Distributed System Security Symposium, February 2003.
4. M. Abadi, C. Fournet, and G. Gonthier. Secure communications processing for distributed languages. In IEEE Symposium on Security and Privacy, 1999.
5. M. Abadi, C. Fournet, and G. Gonthier. Authentication primitives and their compilation. In Proceedings of ACM Symposium on Principles of Programming Languages, 2000.
6. M. Abadi and A. Gordon. A calculus for cryptographic protocols: The spi calculus. Information and Computation, 148(1):1-70, January 1999.
7. M. Abadi, B. Lampson, M. Burrows, and E. Wobber. Authentication in distributed systems: Theory and practice. ACM Trans. Comput. Syst., 10(4):265-310, 1992. Also appeared as SRC Research Report 83.
8. M. Abadi, E. Wobber, M. Burrows, and B. Lampson. Authentication in the Taos operating system. ACM Transactions on Computer Systems, 12(1):3-32, 1994. Also appeared as SRC Research Report 117.
9. B. Blanchet. From secrecy to authenticity in security protocols. In 9th International Static Analysis Symposium (SAS'02), pages 242-259, 2002.
10. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. Keromytis. The role of trust management in distributed systems security. In J. Vitek and C. Jensen, editors, Secure Internet Programming: Security Issues for Distributed and Mobile Objects, volume 1603 of Lecture Notes in Computer Science. Springer-Verlag, 1999.
11. M. Blaze, J. Feigenbaum, and J. Lacy. Decentralized trust management. In IEEE Symposium on Security and Privacy, 1996.
12. L. Cardelli, G. Ghelli, and A. D. Gordon. Secrecy and group creation. In Concurrency Theory (CONCUR). Springer-Verlag, 2000.
13. G. Castagna and J. Vitek. A calculus of secure mobile computations. In Internet Programming Languages, Lecture Notes in Computer Science. Springer-Verlag, 1999.
14. D. E. Denning and P. J. Denning. Certification of programs for secure information flow. Communications of the ACM, 1977.
15. D. Duggan. Cryptographic types. In Computer Security Foundations Workshop, Nova Scotia, Canada, 2002. IEEE Press.
16. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. Simple public key certificate. Internet Draft draft-ietf-spki-cert-structure-05.txt, 1998.
17. A. D. Gordon and A. Jeffrey. Authenticity by typing for security protocols. In IEEE Computer Security Foundations Workshop (CSFW), June 2001.
18. A. D. Gordon and A. Jeffrey. Types and effects for asymmetric cryptographic protocols. In IEEE Computer Security Foundations Workshop (CSFW), June 2002.
19. N. Heintze and J. G. Riecke. The SLam calculus: programming with secrecy and integrity. In ACM, editor, Conference record of POPL '98: the 25th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, San Diego, California, 19-21 January 1998, pages 365-377, New York, NY, USA, 1998. ACM Press.
20. M. Hennessy and J. Riely. Type-safe execution of mobile agents in anonymous networks. In Secure Internet Programming: Security Issues for Distributed and Mobile Objects, Lecture Notes in Computer Science. Springer-Verlag, 1999.
21. P. Laud. Handling encryption in an analysis for secure information flow. In European Symposium on Programming, pages 159-173, 2003.
22. J. Mitchell and G. Plotkin. Abstract types have existential types. ACM Transactions on Programming Languages and Systems, 10(3):470-502, 1988.
23. G. Morrisett, D. Walker, K. Crary, and N. Glew. From System F to typed assembly language. ACM TOPLAS, 21(3):528-569, 1999.
24. A. C. Myers and B. Liskov. Complete, safe information flow with decentralized labels. In IEEE Symposium on Security and Privacy, 1998.
25. A. C. Myers and B. Liskov. Protecting privacy using the decentralized label model. ACM Transactions on Software Engineering and Methodology, 9(4), 2000.
26. G. Necula. Proof-carrying code. In Proceedings of ACM Symposium on Principles of Programming Languages, 1997.
27. G. Necula and P. Lee. Safe kernel extensions without runtime checking. In Operating Systems Design and Implementation, 1996.
28. F. Pottier. A simple view of type-secure information flow in the pi-calculus. In Computer Security Foundations Workshop, 2002.
29. F. Pottier and S. Conchon. Information flow inference for free. In Proceedings of ACM International Conference on Functional Programming, 2000.
30. J. Riely and M. Hennessy. Trust and partial typing In open systems of mobile agents. In Proceedings of ACM Symposium on Principles of Programming Languages, 1999.
31. A. Sabelfeld and A. Myers. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, 2002.
32. P. Sewell and J. Vitek. Secure composition of untrusted code: Wrappers and causality types. In Computer Security Foundations Workshop, 2000.
33. A. Stoughton. Access flow: A protection model which integrates access control and information flow. IEEE Symposium on Security and Privacy, pages 9-18, 1981.
34. E. Sumii and B. C. Pierce. Logical relations for encryption. In Computer Security Foundations Workshop, June 2001.
35. D. Volpano and G. Smith. A type-based approach to program security. In Proceedings of the International Joint Conference on Theory and Practice of Software Development. Springer-Verlag, 1997.
36. S. Zdancewic and A. C. Myers. Robust declassification. In Computer Security Foundations Workshop, 2001.
37. S. Zdancewic, L. Zheng, N. Nystrom, and A. C. Myers. Untrusted hosts and confidentiality: Secure program partitioning. In Symposium on Operating Systems Principles, 2001.