Types and trace effects of higher order programs

Authors:
Christian Skalka;Scott Smith;David Van horn
Affiliations:
The university of vermont, burlington, vermont, usa (email: skalka@cs.uvm.edu);The johns hopkins university, baltimore, maryland, usa (email: scott@cs.jhu.edu);Brandeis university, waltham, massachusetts, usa (email: dvanhorn@cs.brandeis.edu)
Venue:
Journal of Functional Programming
Year:
2008

Citing 31
Cited 10

Regular types for active objects

OOPSLA '93 Proceedings of the eighth annual conference on Object-oriented programming systems, languages, and applications
A type system equivalent to flow analysis

ACM Transactions on Programming Languages and Systems (TOPLAS)
Logical observable entities

Proceedings of the 13th ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
History-based access control for mobile code

CCS '98 Proceedings of the 5th ACM conference on Computer and communications security
Trace-Based Abstract Interpretation of Operational Semantics

Lisp and Symbolic Computation
Enforcing trace properties by program transformation

Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A type system for expressive security policies

Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
SASI enforcement of security policies: a retrospective

Proceedings of the 1999 workshop on New security paradigms
Static enforcement of security with types

ICFP '00 Proceedings of the fifth ACM SIGPLAN international conference on Functional programming
Enforceable security policies

ACM Transactions on Information and System Security (TISSEC)
Enforcing high-level protocols in low-level software

Proceedings of the ACM SIGPLAN 2001 conference on Programming language design and implementation
Resource usage analysis

POPL '02 Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Types and programming languages

Types and programming languages
Flow-sensitive type qualifiers

PLDI '02 Proceedings of the ACM SIGPLAN 2002 Conference on Programming language design and implementation
ESP: path-sensitive program verification in polynomial time

PLDI '02 Proceedings of the ACM SIGPLAN 2002 Conference on Programming language design and implementation
Model checking security properties of control flow graphs

Journal of Computer Security
Secure calling contexts for stack inspection

Proceedings of the 4th ACM SIGPLAN international conference on Principles and practice of declarative programming
MOPS: an infrastructure for examining security properties of software

Proceedings of the 9th ACM conference on Computer and communications security
Model-Checking LTL with Regular Valuations for Pushdown Systems

TACS '01 Proceedings of the 4th International Symposium on Theoretical Aspects of Computer Software
Bebop: A Symbolic Model Checker for Boolean Programs

Proceedings of the 7th International SPIN Workshop on SPIN Model Checking and Software Verification
Model Checking for Context-Free Processes

CONCUR '92 Proceedings of the Third International Conference on Concurrency Theory
Subtyping Constrained Types

SAS '96 Proceedings of the Third International Symposium on Static Analysis
An effective theory of type refinements

ICFP '03 Proceedings of the eighth ACM SIGPLAN international conference on Functional programming
Enforcing Secure Service Composition

CSFW '05 Proceedings of the 18th IEEE workshop on Computer Security Foundations
Trace effects and object orientation

PPDP '05 Proceedings of the 7th ACM SIGPLAN international conference on Principles and practice of declarative programming
Certified In-lined Reference Monitoring on .NET

Proceedings of the 2006 workshop on Programming languages and analysis for security
A static type system for JVM access control

ACM Transactions on Programming Languages and Systems (TOPLAS)
Going beyond the sandbox: an overview of the new security architecture in the javaTM development Kit 1.2

USITS'97 Proceedings of the USENIX Symposium on Internet Technologies and Systems on USENIX Symposium on Internet Technologies and Systems
A Type and Effect System for Flexible Abstract Interpretation of Java

Electronic Notes in Theoretical Computer Science (ENTCS)
Types and effects for non-interfering program monitors

ISSS'02 Proceedings of the 2002 Mext-NSF-JSPS international conference on Software security: theories and systems
History-based access control with local policies

FOSSACS'05 Proceedings of the 8th international conference on Foundations of Software Science and Computation Structures

Contextual effects for version-consistent dynamic software updating and safe concurrent programming

Proceedings of the 35th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Formalizing Soundness of Contextual Effects

TPHOLs '08 Proceedings of the 21st International Conference on Theorem Proving in Higher Order Logics
Types and trace effects for object orientation

Higher-Order and Symbolic Computation
Local policies for resource usage analysis

ACM Transactions on Programming Languages and Systems (TOPLAS)
ν -Types for Effects and Freshness Analysis

ICTAC '09 Proceedings of the 6th International Colloquium on Theoretical Aspects of Computing
Abstracting abstract machines

Proceedings of the 15th ACM SIGPLAN international conference on Functional programming
From type checking by recursive descent to type checking with an abstract machine

Proceedings of the Eleventh Workshop on Language Descriptions, Tools and Applications
Types for coordinating secure behavioural variations

COORDINATION'12 Proceedings of the 14th international conference on Coordination Models and Languages
Nominal automata for resource usage control

CIAA'12 Proceedings of the 17th international conference on Implementation and Application of Automata
Formalising security in ubiquitous and cloud scenarios

CISIM'12 Proceedings of the 11th IFIP TC 8 international conference on Computer Information Systems and Industrial Management

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper shows how type effect systems can be combined with model-checking techniques to produce powerful, automatically verifiable program logics for higher order programs. The properties verified are based on the ordered sequence of events that occur during program execution, so-called event traces. Our type and effect systems infer conservative approximations of the event traces arising at run-time, and model-checking techniques are used to verify logical properties of these histories. Our language model is based on the λ-calculus. Technical results include a type inference algorithm for a polymorphic type effect system, and a method for applying known model-checking techniques to the trace effects inferred by the type inference algorithm, allowing static enforcement of history-and stack-based security mechanisms. A type safety result is proven for both unification and subtyping constraint versions of the type system, ensuring that statically well-typed programs do not contain trace event checks that can fail at run-time.