ActionScript bytecode verification with co-logic programming

  • Authors:
  • Brian W. DeVries;Gopal Gupta;Kevin W. Hamlen;Scott Moore;Meera Sridhar

  • Affiliations:
  • The University of Texas at Dallas;The University of Texas at Dallas;The University of Texas at Dallas;The University of Texas at Dallas;The University of Texas at Dallas

  • Venue:
  • Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

A prototype security policy verification system for Action-Script binaries is presented, whose implementation leverages recent advances in co-logic programming. Our experience with co-logic programming indicates that it is an extremely useful paradigm for elegantly expressing algorithms that lie at the heart of model-checking technologies. This results in an unusually small trusted computing base, making the verification system well-suited to frameworks like certifying in-lined reference monitoring systems, which require small, light-weight verifiers. Preliminary experiments and progress are discussed.