Class properties for security review in an object-capability subset of Java: (short paper)

Authors:
Adrian Mettler;David Wagner
Affiliations:
University of California, Berkeley;University of California, Berkeley
Venue:
PLAS '10 Proceedings of the 5th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security
Year:
2010

Citing 10
Cited 0

Protection in programming languages

Communications of the ACM
KeyKOS architecture

ACM SIGOPS Operating Systems Review
Declaring and checking non-null types in an object-oriented language

OOPSLA '03 Proceedings of the 18th annual ACM SIGPLAN conference on Object-oriented programing, systems, languages, and applications
Javari: adding reference immutability to Java

OOPSLA '05 Proceedings of the 20th annual ACM SIGPLAN conference on Object-oriented programming, systems, languages, and applications
A framework for implementing pluggable type systems

Proceedings of the 21st annual ACM SIGPLAN conference on Object-oriented programming systems, languages, and applications
Robust composition: towards a unified approach to access control and concurrency control

Robust composition: towards a unified approach to access control and concurrency control
Object and reference immutability using Java generics

Proceedings of the the 6th joint meeting of the European software engineering conference and the ACM SIGSOFT symposium on The foundations of software engineering
Establishing object invariants with delayed types

Proceedings of the 22nd annual ACM SIGPLAN conference on Object-oriented programming systems and applications
Practical pluggable types for java

ISSTA '08 Proceedings of the 2008 international symposium on Software testing and analysis
Verifiable functional purity in java

Proceedings of the 15th ACM conference on Computer and communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

Joe-E is a subset of the Java language, with additional restrictions enforced by a static source-code verifier. We explore several semantic properties of classes relating to immutability and object identity that can be declared by the programmer and are checked by the Joe-E verifier. We present the simple, modular analyses we use to verify these properties and describe how they are useful in performing security reviews of applications.