Security type error diagnosis for higher-order, polymorphic languages

Authors:
Jeroen Weijers;Jurriaan Hage;Stefan Holdermans
Affiliations:
Universitaet Tuebingen, Tuebingen, Germany;Utrecht University, Utrecht, Netherlands;Vector Fabrics, Eindhoven, Netherlands
Venue:
PEPM '13 Proceedings of the ACM SIGPLAN 2013 workshop on Partial evaluation and program manipulation
Year:
2013

Citing 21
Cited 1

Polymorphic effect systems

POPL '88 Proceedings of the 15th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Qualified types: theory and practice

Qualified types: theory and practice
The SLam calculus: programming with secrecy and integrity

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A core calculus of dependency

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A sound type system for secure flow analysis

Journal of Computer Security
A maximum-flow approach to anomaly isolation in unification-based incremental type inference

POPL '86 Proceedings of the 13th ACM SIGACT-SIGPLAN symposium on Principles of programming languages
Principles of Program Analysis

Principles of Program Analysis
Principal type-schemes for functional programs

POPL '82 Proceedings of the 9th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Information flow inference for ML

ACM Transactions on Programming Languages and Systems (TOPLAS)
Interactive type debugging in Haskell

Haskell '03 Proceedings of the 2003 ACM SIGPLAN workshop on Haskell
Scripting the type inference process

ICFP '03 Proceedings of the eighth ACM SIGPLAN international conference on Functional programming
Type error slicing in implicitly typed higher-order languages

Science of Computer Programming - Special issue on 12th European symposium on programming (ESOP 2003)
Type inference and informative error reporting for secure information flow

Proceedings of the 44th annual Southeast regional conference
Searching for type-error messages

Proceedings of the 2007 ACM SIGPLAN conference on Programming language design and implementation
Finding user/kernel pointer bugs with type inference

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
A library for light-weight information-flow security in haskell

Proceedings of the first ACM SIGPLAN symposium on Haskell
Effective blame for information-flow violations

Proceedings of the 16th ACM SIGSOFT International Symposium on Foundations of software engineering
Corrective hints for type incorrect generic Java programs

Proceedings of the 2010 ACM SIGPLAN workshop on Partial evaluation and program manipulation
Heuristics for type error discovery and recovery

IFL'06 Proceedings of the 18th international conference on Implementation and application of functional languages
Language-based information-flow security

IEEE Journal on Selected Areas in Communications
Improving type error messages for generic Java

Higher-Order and Symbolic Computation

Toward general diagnosis of static errors

Proceedings of the 41st ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages

Quantified Score

Hi-index	0.00

Visualization

Abstract

We combine the type error slicing and heuristics based approaches to type error diagnostic improvement within the context of type based security analysis on a let-polymorphic call by value lambda calculus extended with lists, pairs and the security specific constructs declassify and protect. We define and motivate four classes of heuristics that help diagnose inconsistencies among the constraints, and show their effect on a selection of security incorrect programs.