Non-interference for a JVM-like language

Authors:
Gilles Barthe;Tamara Rezk
Affiliations:
INRIA Sophia Antipolis, France;INRIA Sophia Antipolis, France
Venue:
TLDI '05 Proceedings of the 2005 ACM SIGPLAN international workshop on Types in languages design and implementation
Year:
2005

Citing 13
Cited 24

From system F to typed assembly language

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
JFlow: practical mostly-static information flow control

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A unified approach to global program optimization

POPL '73 Proceedings of the 1st annual ACM SIGACT-SIGPLAN symposium on Principles of programming languages
Java and the Java Virtual Machine: Definition, Verification, Validation with Cdrom

Java and the Java Virtual Machine: Definition, Verification, Validation with Cdrom
Information flow inference for ML

ACM Transactions on Programming Languages and Systems (TOPLAS)
Combining Abstract Interpretation and Model Checking for Analysing Security Properties of Java Bytecode

VMCAI '02 Revised Papers from the Third International Workshop on Verification, Model Checking, and Abstract Interpretation
Checking secure interactions of smart card applets: extended version

Journal of Computer Security - Special issue on ESORICS 2000
Java Bytecode Verification: Algorithms and Formalizations

Journal of Automated Reasoning
A Type System for the Java Bytecode Language and Verifier

Journal of Automated Reasoning
Stack-based access control and secure information flow

Journal of Functional Programming
Simple verification technique for complex Java bytecode subroutines: Research Articles

Concurrency and Computation: Practice & Experience - Formal Techniques for Java-like Programs
Information flow analysis for java bytecode

VMCAI'05 Proceedings of the 6th international conference on Verification, Model Checking, and Abstract Interpretation
Language-based information-flow security

IEEE Journal on Selected Areas in Communications

Decidability and proof systems for language-based noninterference relations

Conference record of the 33rd ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Abstract non-interference in a fragment of Java bytecode

Proceedings of the 2006 ACM symposium on Applied computing
Compositional type systems for stack-based low-level languages

CATS '06 Proceedings of the 12th Computing: The Australasian Theroy Symposium - Volume 51
Security types preserving compilation

Computer Languages, Systems and Structures
Reasoning about safety properties in a JVM-like environment

Science of Computer Programming
Instruction-level security analysis for information flow in stack-based assembly languages

Information and Computation
Type-based information flow analysis for bytecode languages with variable object field policies

Proceedings of the 2008 ACM symposium on Applied computing
Secure Information Flow as a Safety Property

Formal Aspects in Security and Trust
Catch me if you can: permissive yet secure error handling

Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security
Combining different proof techniques for verifying information flow security

LOPSTR'06 Proceedings of the 16th international conference on Logic-based program synthesis and transformation
A certified lightweight non-interference java bytecode verifier

ESOP'07 Proceedings of the 16th European conference on Programming
Security of multithreaded programs by compilation

ACM Transactions on Information and System Security (TISSEC)
Relational decomposition

ITP'11 Proceedings of the Second international conference on Interactive theorem proving
Certifying native java card API by formal refinement

CARDIS'06 Proceedings of the 7th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications
Noninterference with dynamic security domains and policies

ASIAN'09 Proceedings of the 13th Asian conference on Advances in Computer Science: information Security and Privacy
Formal methods for smartcard security

Foundations of Security Analysis and Design III
From coupling relations to mated invariants for checking information flow

ESORICS'06 Proceedings of the 11th European conference on Research in Computer Security
Abstract interpretation to check secure information flow in programs with input-output security annotations

FAST'05 Proceedings of the Third international conference on Formal Aspects in Security and Trust
Securing the future: an information flow analysis of a distributed OO language

SOFSEM'12 Proceedings of the 38th international conference on Current Trends in Theory and Practice of Computer Science
Noninterference via symbolic execution

FMOODS'12/FORTE'12 Proceedings of the 14th joint IFIP WG 6.1 international conference and Proceedings of the 32nd IFIP WG 6.1 international conference on Formal Techniques for Distributed Systems
Security of multithreaded programs by compilation

ESORICS'07 Proceedings of the 12th European conference on Research in Computer Security
Dynamic information flow control architecture for web applications

ESORICS'07 Proceedings of the 12th European conference on Research in Computer Security
Taint analysis of security code in the KLEE symbolic execution engine

ICICS'12 Proceedings of the 14th international conference on Information and Communications Security
Compositional type systems for stack-based low-level languages

CATS '06 Proceedings of the Twelfth Computing: The Australasian Theory Symposium - Volume 51

Quantified Score

Hi-index	0.00

Visualization

Abstract

We define an information flow type system for a sequential JVM-like language that includes classes, objects, and exceptions. Furthermore, we show that it enforces non-interference. Our work provides, to our best knowledge, the first analysis that has been shown to guarantee non-interference for a realistic low level language.