Secure program partitioning

Authors:
Steve Zdancewic;Lantian Zheng;Nathaniel Nystrom;Andrew C. Myers
Affiliations:
Cornell University, Ithaca, NY;Cornell University, Ithaca, NY;Cornell University, Ithaca, NY;Cornell University, Ithaca, NY
Venue:
ACM Transactions on Computer Systems (TOCS)
Year:
2002

Citing 29
Cited 34

Fine-grained mobility in the Emerald system

ACM Transactions on Computer Systems (TOCS)
Multilevel security in the UNIX tradition

Software—Practice & Experience
Proof-carrying code

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Secure information flow in a multi-threaded imperative language

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
The SLam calculus: programming with secrecy and integrity

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A core calculus of dependency

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
JFlow: practical mostly-static information flow control

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
From system F to typed assembly language

ACM Transactions on Programming Languages and Systems (TOPLAS)
Transforming out timing leaks

Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Verifying secrets and relative secrecy

Proceedings of the 27th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Information flow inference for free

ICFP '00 Proceedings of the fifth ACM SIGPLAN international conference on Functional programming
A sound type system for secure flow analysis

Journal of Computer Security
Certification of programs for secure information flow

Communications of the ACM
A lattice model of secure information flow

Communications of the ACM
Security Kernel validation in practice

Communications of the ACM
Protecting privacy using the decentralized label model

ACM Transactions on Software Engineering and Methodology (TOSEM)
Untrusted hosts and confidentiality: secure program partitioning

SOSP '01 Proceedings of the eighteenth ACM symposium on Operating systems principles
Java Virtual Machine Specification

Java Virtual Machine Specification
Trust in the lambda-Calculus

SAS '95 Proceedings of the Second International Symposium on Static Analysis
Probabilistic Noninterference for Multi-Threaded Programs

CSFW '00 Proceedings of the 13th IEEE workshop on Computer Security Foundations
Enforceable Security Policies

Enforceable Security Policies
Automatic Code Placement Alternatives for Ad-Hoc And Sensor Networks

Automatic Code Placement Alternatives for Ad-Hoc And Sensor Networks
A Generic Approach to the Security of Multi-Threaded Programs

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
A New Type System for Secure Information Flow

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
Robust Declassification

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
A Logical Approach to Multilevel Security of Probabilistic Systems

SP '92 Proceedings of the 1992 IEEE Symposium on Security and Privacy
Absorbing covers and intransitive non-interference

SP '95 Proceedings of the 1995 IEEE Symposium on Security and Privacy
SSH: secure login connections over the internet

SSYM'96 Proceedings of the 6th conference on USENIX Security Symposium, Focusing on Applications of Cryptography - Volume 6
On the (im)possibility of basing oblivious transfer and bit commitment on weakened security assumptions

EUROCRYPT'99 Proceedings of the 17th international conference on Theory and application of cryptographic techniques

Using Replication and Partitioning to Build Secure Distributed Systems

SP '03 Proceedings of the 2003 IEEE Symposium on Security and Privacy
From sequential programs to multi-tier applications by program transformation

Proceedings of the 32nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Enforcing robust declassification and qualified robustness

Journal of Computer Security - Special issue on CSFW17
Privtrans: automatically partitioning programs for privilege separation

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
Fairplay—a secure two-party computation system

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
An End-To-End Approach to Distributed Policy Language Implementation

Electronic Notes in Theoretical Computer Science (ENTCS)
Secure web applications via automatic partitioning

Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles
Cryptographically sound implementations for typed information-flow security

Proceedings of the 35th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages
The design and implementation of microdrivers

Proceedings of the 13th international conference on Architectural support for programming languages and operating systems
Flicker: an execution infrastructure for tcb minimization

Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008
Microdrivers: a new architecture for device drivers

HOTOS'07 Proceedings of the 11th USENIX workshop on Hot topics in operating systems
Securing nonintrusive web encryption through information flow

Proceedings of the third ACM SIGPLAN workshop on Programming languages and analysis for security
Building secure web applications with automatic partitioning

Communications of the ACM - Inspiring Women in Computing
Flow Policy Awareness for Distributed Mobile Code

CONCUR 2009 Proceedings of the 20th International Conference on Concurrency Theory
Fabric: a platform for secure distributed computation and storage

Proceedings of the ACM SIGOPS 22nd symposium on Operating systems principles
A security-preserving compiler for distributed programs: from information-flow policies to cryptographic mechanisms

Proceedings of the 16th ACM conference on Computer and communications security
Hardware-enforced fine-grained isolation of untrusted code

Proceedings of the first ACM workshop on Secure execution of untrusted code
Fluid information systems

NSPW '09 Proceedings of the 2009 workshop on New security paradigms workshop
Program partitioning using dynamic trust models

FAST'06 Proceedings of the 4th international conference on Formal aspects in security and trust
Compiling information-flow security to minimal trusted computing bases

ESOP'11/ETAPS'11 Proceedings of the 20th European conference on Programming languages and systems: part of the joint European conferences on theory and practice of software
Automating information flow control in component-based distributed systems

Proceedings of the 14th international ACM Sigsoft symposium on Component based software engineering
Trust extension as a mechanism for secure code execution on commodity computers

Trust extension as a mechanism for secure code execution on commodity computers
Non-disclosure for distributed mobile code

FSTTCS '05 Proceedings of the 25th international conference on Foundations of Software Technology and Theoretical Computer Science
Programming with explicit security policies

ESOP'05 Proceedings of the 14th European conference on Programming Languages and Systems
A semantic framework for declassification and endorsement

ESOP'10 Proceedings of the 19th European conference on Programming Languages and Systems
Type-Based distributed access control vs. untyped attackers

FAST'05 Proceedings of the Third international conference on Formal Aspects in Security and Trust
Automatic partitioning of database applications

Proceedings of the VLDB Endowment
Babel: a secure computer is a polyglot

Proceedings of the 2012 ACM Workshop on Cloud computing security workshop
Adaptive defenses for commodity software through virtual application partitioning

Proceedings of the 2012 ACM conference on Computer and communications security
Enforcing user-space privilege separation with declarative architectures

Proceedings of the seventh ACM workshop on Scalable trusted computing
Partitioning applications for hybrid and federated clouds

CASCON '12 Proceedings of the 2012 Conference of the Center for Advanced Studies on Collaborative Research
Privacy by design: a formal framework for the analysis of architectural choices

Proceedings of the third ACM conference on Data and application security and privacy
Efficient user-space information flow control

Proceedings of the 8th ACM SIGSAC symposium on Information, computer and communications security
Towards reducing the attack surface of software backdoors

Proceedings of the 2013 ACM SIGSAC conference on Computer & communications security

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents secure program partitioning, a language-based technique for protecting confidential data during computation in distributed systems containing mutually untrusted hosts. Confidentiality and integrity policies can be expressed by annotating programs with security types that constrain information flow; these programs can then be partitioned automatically to run securely on heterogeneously trusted hosts. The resulting communicating subprograms collectively implement the original program, yet the system as a whole satisfies the security requirements of participating principals without requiring a universally trusted host machine. The experience in applying this methodology and the performance of the resulting distributed code suggest that this is a promising way to obtain secure distributed computation.