ActionScript in-lined reference monitoring in prolog

Authors:
Meera Sridhar;Kevin W. Hamlen
Affiliations:
The University of Texas at Dallas, Richardson, Texas;The University of Texas at Dallas, Richardson, Texas
Venue:
PADL'10 Proceedings of the 12th international conference on Practical Aspects of Declarative Languages
Year:
2010

Citing 6
Cited 4

The art of Prolog (2nd ed.): advanced programming techniques

The art of Prolog (2nd ed.): advanced programming techniques
Enforceable security policies

ACM Transactions on Information and System Security (TISSEC)
Computability classes for enforcement mechanisms

ACM Transactions on Programming Languages and Systems (TOPLAS)
Certified In-lined Reference Monitoring on .NET

Proceedings of the 2006 workshop on Programming languages and analysis for security
ActionScript bytecode verification with co-logic programming

Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security
Model-checking in-lined reference monitors

VMCAI'10 Proceedings of the 11th international conference on Verification, Model Checking, and Abstract Interpretation

Disambiguating aspect-oriented security policies

Proceedings of the 9th International Conference on Aspect-Oriented Software Development
FIRM: capability-based inline mediation of Flash behaviors

Proceedings of the 26th Annual Computer Security Applications Conference
Flexible in-lined reference monitor certification: challenges and future directions

Proceedings of the 5th ACM workshop on Programming languages meets program verification
Aspect-Oriented runtime monitor certification

TACAS'12 Proceedings of the 18th international conference on Tools and Algorithms for the Construction and Analysis of Systems

Quantified Score

Hi-index	0.00

Visualization

Abstract

A Prolog implementation of an In-lined Reference Monitoring system prototype for Adobe ActionScript Bytecode programs is presented. Prolog provides an elegant framework for implementing IRM’s. Its declarative and reversible nature facilitate the dual tasks of binary parsing and code generation, greatly simplifying many otherwise difficult IRM implementation challenges. The approach is demonstrated via the enforcement of several security policies on real-world Adobe Flash applets and AIR applications.