TY - GEN
T1 - Type-Based Declassification for Free
AU - Ngo, Minh
AU - Naumann, David A.
AU - Rezk, Tamara
N1 - Publisher Copyright:
© 2020, Springer Nature Switzerland AG.
PY - 2020
Y1 - 2020
N2 - This work provides a study to demonstrate the potential of using off-the-shelf programming languages and their theories to build sound language-based-security tools. Our study focuses on information flow security encompassing declassification policies that allow us to express flexible security policies needed for practical requirements. We translate security policies, with declassification, into an interface for which an unmodified standard typechecker can be applied to a source program—if the program typechecks, it provably satisfies the policy. Our proof reduces security soundness—with declassification—to the mathematical foundation of data abstraction, Reynolds’ abstraction theorem.
AB - This work provides a study to demonstrate the potential of using off-the-shelf programming languages and their theories to build sound language-based-security tools. Our study focuses on information flow security encompassing declassification policies that allow us to express flexible security policies needed for practical requirements. We translate security policies, with declassification, into an interface for which an unmodified standard typechecker can be applied to a source program—if the program typechecks, it provably satisfies the policy. Our proof reduces security soundness—with declassification—to the mathematical foundation of data abstraction, Reynolds’ abstraction theorem.
UR - http://www.scopus.com/inward/record.url?scp=85098256771&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=85098256771&partnerID=8YFLogxK
U2 - 10.1007/978-3-030-63406-3_11
DO - 10.1007/978-3-030-63406-3_11
M3 - Conference contribution
AN - SCOPUS:85098256771
SN - 9783030634056
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 181
EP - 197
BT - Formal Methods and Software Engineering - 22nd International Conference on Formal Engineering Methods, ICFEM 2020, Proceedings
A2 - Lin, Shang-Wei
A2 - Hou, Zhe
A2 - Mahoney, Brendan
T2 - 22nd International Conference on Formal Engineering Methods, ICFEM 2020
Y2 - 1 March 2020 through 3 March 2020
ER -