TY - GEN
T1 - On-the-fly inlining of dynamic dependency monitors for secure information flow
AU - Bello, Luciano
AU - Bonelli, Eduardo
PY - 2012
Y1 - 2012
N2 - Information flow analysis (IFA) in the setting of programming languages is steadily veering towards the adoption of dynamic techniques. This is particularly attractive for scripting languages for web applications programming. A common manifestation of dynamic techniques is that of run-time monitors, which should block program execution in the presence of an insecure run. Significant efforts are still required before practical, scalable monitors for secure IFA of industrial scale languages such as JavaScript can be achieved. Such monitors ideally should compensate for the absence of the traces they do not track, should not require modifications of the VM and should provide a fair compromise between security and usability among other things. This paper discusses on-the-fly inlining of monitors that track dependencies as a prospective candidate.
AB - Information flow analysis (IFA) in the setting of programming languages is steadily veering towards the adoption of dynamic techniques. This is particularly attractive for scripting languages for web applications programming. A common manifestation of dynamic techniques is that of run-time monitors, which should block program execution in the presence of an insecure run. Significant efforts are still required before practical, scalable monitors for secure IFA of industrial scale languages such as JavaScript can be achieved. Such monitors ideally should compensate for the absence of the traces they do not track, should not require modifications of the VM and should provide a fair compromise between security and usability among other things. This paper discusses on-the-fly inlining of monitors that track dependencies as a prospective candidate.
UR - http://www.scopus.com/inward/record.url?scp=84863955411&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84863955411&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-29420-4_4
DO - 10.1007/978-3-642-29420-4_4
M3 - Conference contribution
AN - SCOPUS:84863955411
SN - 9783642294198
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 55
EP - 69
BT - Formal Aspects of Security and Trust - 8th International Workshop, FAST 2011, Revised Selected Papers
T2 - 8th International Workshop on Formal Aspects of Security and Trust, FAST 2011
Y2 - 12 September 2011 through 14 September 2011
ER -