An End-To-End Approach to Distributed Policy Language Implementation

Authors:
Tom Chothia;Dominic Duggan;Ye Wu
Affiliations:
Centrum voor Wiskunde en Informatica (CWI), Kruislaan 413, 1098 SJ, P.O. Box 94079, 1090 GB Amsterdam, The Netherlands;Dept of Computer Science, Stevens Institute of Technology, Hoboken, NJ 07040, USA;Dept of Computer Science, Stevens Institute of Technology, Hoboken, NJ 07040, USA
Venue:
Electronic Notes in Theoretical Computer Science (ENTCS)
Year:
2007

Citing 30
Cited 0

Logic programming in the LF logical framework

Logical frameworks
A framework for defining logics

Journal of the ACM (JACM)
Safe kernel extensions without run-time checking

OSDI '96 Proceedings of the second USENIX symposium on Operating systems design and implementation
Proof-carrying code

Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A decentralized model for information flow control

Proceedings of the sixteenth ACM symposium on Operating systems principles
JFlow: practical mostly-static information flow control

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
From system F to typed assembly language

ACM Transactions on Programming Languages and Systems (TOPLAS)
Information flow inference for free

ICFP '00 Proceedings of the fifth ACM SIGPLAN international conference on Functional programming
A method for obtaining digital signatures and public-key cryptosystems

Communications of the ACM
Certification of programs for secure information flow

Communications of the ACM
Protecting privacy using the decentralized label model

ACM Transactions on Software Engineering and Methodology (TOSEM)
Analyzing security protocols with secrecy types and logic programs

POPL '02 Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Secure program partitioning

ACM Transactions on Computer Systems (TOCS)
Secrecy by Typing inSecurity Protocols

TACS '97 Proceedings of the Third International Symposium on Theoretical Aspects of Computer Software
A Type-Based Approach to Program Security

TAPSOFT '97 Proceedings of the 7th International Joint Conference CAAP/FASE on Theory and Practice of Software Development
From Secrecy to Authenticity in Security Protocols

SAS '02 Proceedings of the 9th International Symposium on Static Analysis
Distributed credential chain discovery in trust management

Journal of Computer Security
Types and Effects for Asymmetric Cryptographic Protocols

CSFW '02 Proceedings of the 15th IEEE workshop on Computer Security Foundations
Foundational Proof-Carrying Code

LICS '01 Proceedings of the 16th Annual IEEE Symposium on Logic in Computer Science
Authenticity by Typing for Security Protocols

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
Decentralized Trust Management

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
Role-based cascaded delegation

Proceedings of the ninth ACM symposium on Access control models and technologies
Access control for the web via proof-carrying authorization

Access control for the web via proof-carrying authorization
A type system for certified binaries

ACM Transactions on Programming Languages and Systems (TOPLAS)
Beyond proof-of-compliance: security analysis in trust management

Journal of the ACM (JACM)
Secure delegation for distributed object environments

COOTS'98 Proceedings of the 4th conference on USENIX Conference on Object-Oriented Technologies and Systems - Volume 4
Type-based cryptographic operations

Journal of Computer Security - Special issue on CSFW15
Certificate-based encryption and the certificate revocation problem

EUROCRYPT'03 Proceedings of the 22nd international conference on Theory and applications of cryptographic techniques
A design for a security-typed language with certificate-based declassification

ESOP'05 Proceedings of the 14th European conference on Programming Languages and Systems
Language-based information-flow security

IEEE Journal on Selected Areas in Communications

Quantified Score

Hi-index	0.00

Visualization

Abstract

Language-based security approaches to access control and information flow control must at some point rely on a language for expressing policies. However there will in general be several choices for the correct policy language for any given application, and several choices for the implementation of a policy language in a given domain. This article considers an approach to implementing the policy language at the application level, relying on trusted cryptographic libraries whose interface security guarantees are used to verify the correctness of the policy language implementation.