Information Flow Control among Objects: Taking Foreign Objects into Control

Authors:
Shih-Chien Chou
Affiliations:
-
Venue:
HICSS '03 Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 9 - Volume 9
Year:
2003

Citing 0
Cited 2

An agent-based inter-application information flow control model

Journal of Systems and Software - Special issue: Software engineering education and training
On the design of access control to prevent sensitive information leakage in distributed object systems: a colored petri net based model

OTM'05 Proceedings of the 2005 OTM Confederated international conference on On the Move to Meaningful Internet Systems: CoopIS, COA, and ODBASE - Volume Part II

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper proposes a model to control information flows among objects. It improves flexibility of the control by independently assigning security levels to attributes, arguments, and returnvalues. It uses associations and multiple labels to control information flows among objects that may be dynamically instantiated during program execution. According to our survey, no model offers the control as precisely as our model does. In addition to controlling objects, the model also controls foreign objects, which are those dynamically retrieved for reuse during program execution. Rules are designed to prevent foreign objects from becoming Trojan horses.