Towards a unifying view on security contracts

Authors:
Bart De Win;Frank Piessens;Jan Smans;Wouter Joosen
Affiliations:
Katholieke Universiteit Leuven, Leuven, Belgium;Katholieke Universiteit Leuven, Leuven, Belgium;Katholieke Universiteit Leuven, Leuven, Belgium;Katholieke Universiteit Leuven, Leuven, Belgium
Venue:
SESS '05 Proceedings of the 2005 workshop on Software engineering for secure systems—building trustworthy applications
Year:
2005

Citing 11
Cited 1

Proof-carrying code

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Programming Windows Security

Programming Windows Security
Lattice-Based Access Control Models

Computer
Making Components Contract Aware

Computer
Composing Security-Aware Software

IEEE Software
Abstracting Object Interactions Using Composition Filters

ECOOP '93 Proceedings of the Workshop on Object-Based Distributed Programming
Interface-Centric Architecture Descriptions

WICSA '01 Proceedings of the Working IEEE/IFIP Conference on Software Architecture
A general theory of security properties

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
The COMQUAD component model: enabling dynamic selection of implementations by weaving non-functional aspects

Proceedings of the 3rd international conference on Aspect-oriented software development
Computer Security in the Real World

Computer
Language-based information-flow security

IEEE Journal on Selected Areas in Communications

On Practical Information Flow Policies for Java-Enabled Multiapplication Smart Cards

CARDIS '08 Proceedings of the 8th IFIP WG 8.8/11.2 international conference on Smart Card Research and Advanced Applications

Quantified Score

Hi-index	0.00

Visualization

Abstract

A key property of software component technology is predictability, which means that the properties of an overall system can be deduced from the properties of the individual components. One of the crucial building blocks in component technology is the notion of component contract. In order to leverage predictability for the construction of secure systems, security requirements and properties must be adequately supported by component contracts, which is currently a challenging and open problem. This paper provides an overview of the problem domain by presenting an initial taxonomy of security contracts and their representative security properties.