An information flow verifier for small embedded systems

Authors:
Dorina Ghindici;Gilles Grimaud;Isabelle Simplot-Ryl
Affiliations:
L.I.F.L., CNRS, UMR, Université de Lille I, Villeneuve d'Ascq Cedex, France;L.I.F.L., CNRS, UMR, Université de Lille I, Villeneuve d'Ascq Cedex, France;L.I.F.L., CNRS, UMR, Université de Lille I, Villeneuve d'Ascq Cedex, France
Venue:
WISTP'07 Proceedings of the 1st IFIP TC6 /WG8.8 /WG11.2 international conference on Information security theory and practices: smart cards, mobile and ubiquitous computing systems
Year:
2007

Citing 16
Cited 3

Secure information flow in a multi-threaded imperative language

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
JFlow: practical mostly-static information flow control

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A certifying compiler for Java

PLDI '00 Proceedings of the ACM SIGPLAN 2000 conference on Programming language design and implementation
A sound type system for secure flow analysis

Journal of Computer Security
Certification of programs for secure information flow

Communications of the ACM
Java Virtual Machine Specification

Java Virtual Machine Specification
Checking secure interactions of smart card applets: extended version

Journal of Computer Security - Special issue on ESORICS 2000
Java Bytecode Verification: Algorithms and Formalizations

Journal of Automated Reasoning
Java bytecode verification for secure information flow

ACM SIGPLAN Notices
Secure Information Flow by Self-Composition

CSFW '04 Proceedings of the 17th IEEE workshop on Computer Security Foundations
Dimensions and Principles of Declassification

CSFW '05 Proceedings of the 18th IEEE workshop on Computer Security Foundations
On flow-sensitive security types

Conference record of the 33rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Building an "impossible" verifier on a java card

WIESS'02 Proceedings of the 2nd conference on Industrial Experiences with Systems Software - Volume 2
Embedding verifiable information flow analysis

Proceedings of the 2006 International Conference on Privacy, Security and Trust: Bridge the Gap Between PST Technologies and Business Services
Information flow analysis for java bytecode

VMCAI'05 Proceedings of the 6th international conference on Verification, Model Checking, and Abstract Interpretation
Language-based information-flow security

IEEE Journal on Selected Areas in Communications

On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
On-device control flow verification for Java programs

ESSoS'11 Proceedings of the Third international conference on Engineering secure software and systems
Player profile management on NFC smart card for multiplayer ubiquitous games

International Journal of Computer Games Technology - Special issue on cyber games and interactive entertainment

Quantified Score

Hi-index	0.00

Visualization

Abstract

Insecurity arising from illegal information flow represents a real threat in small computing environments allowing code sharing, dynamic class loading and overloading. We introduce a verifier able to certify at loading time Java applications already typed with signatures describing possible information flows. The verifier is implemented as a class loader and can be used on any Java Virtual Machine. The experimental results provided here support our approach and show that the verifier can be successfully embedded. As far as we know, this is the first information flow analysis adapted to open embedded systems.