Static enforcement of information flow policies for a concurrent JVM-like language

  • Authors:
  • Gilles Barthe;Exequiel Rivas

  • Affiliations:
  • IMDEA Software Institute, Madrid, Spain;IMDEA Software Institute, Madrid, Spain

  • Venue:
  • TGC'11 Proceedings of the 6th international conference on Trustworthy Global Computing
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

An essential security goal of mobile code platforms is to protect confidential data against untrusted third-party applications; yet, prevailing mechanisms for ensuring confidentiality of mobile code are limited to sequential programs, whereas existing applications are generally concurrent. To bridge this gap, we develop a sound information-flow type system for a JVM-like, low-level concurrent object-oriented language. The type system builds upon existing solutions for object-oriented languages and concurrency, solving a number of intricate issues in their combination. Moreover, we connect the type system for bytecode programs to a type system for Java programs, extending the results of type-preserving compilation developed in earlier works.