Statically checking confidentiality via dynamic labels

Authors:
Bart Jacobs;Wolter Pieters;Martijn Warnier
Affiliations:
Radboud University Nijmegen, Nijmegen, The Netherlands;Radboud University Nijmegen, Nijmegen, The Netherlands;Radboud University Nijmegen, Nijmegen, The Netherlands
Venue:
WITS '05 Proceedings of the 2005 workshop on Issues in the theory of security
Year:
2005

Citing 4
Cited 5

Java Card Technology for Smart Cards: Architecture and Programmer's Guide

Java Card Technology for Smart Cards: Architecture and Programmer's Guide
Java bytecode verification for secure information flow

ACM SIGPLAN Notices
Stack-based access control and secure information flow

Journal of Functional Programming
ESC/Java2: uniting ESC/Java and JML

CASSIS'04 Proceedings of the 2004 international conference on Construction and Analysis of Safe, Secure, and Interoperable Smart Devices

Security types preserving compilation

Computer Languages, Systems and Structures
Instruction-level security analysis for information flow in stack-based assembly languages

Information and Computation
A Tool for Automated Certification of Java Source Code in Maude

Electronic Notes in Theoretical Computer Science (ENTCS)
Verifying a secure information flow analyzer

TPHOLs'05 Proceedings of the 18th international conference on Theorem Proving in Higher Order Logics
Abstract interpretation to check secure information flow in programs with input-output security annotations

FAST'05 Proceedings of the Third international conference on Formal Aspects in Security and Trust

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper presents a new approach for verifying confidentiality for programs, based on abstract interpretation. The framework is formally developed and proved correct in the theorem prover PVS. We use dynamic labeling functions to abstractly interpret a simple programming language via modification of security levels of variables. Our approach is sound and compositional and results in an algorithm for statically checking confidentiality.