TY - GEN
T1 - Type-based information flow analysis for bytecode languages with variable object field policies
AU - Bavera, Francisco
AU - Bonelli, Eduardo
PY - 2008
Y1 - 2008
N2 - Static, type-based information flow analysis techniques targeted at Java and JVM-like code typically assume a global security policy on object fields: all fields are assigned a fixed security level. In essence they are treated as standard variables. However different objects may be created under varying security contexts, particularly for widely used classes such as wrapper or collection classes. This entails an important loss in precision of the analysis. We present a flowsensitive type system for statically detecting illegal flows of information in a JVM-like language that allows the level of a field to vary at different object creation points. Also, we prove a noninterference result for this language.
AB - Static, type-based information flow analysis techniques targeted at Java and JVM-like code typically assume a global security policy on object fields: all fields are assigned a fixed security level. In essence they are treated as standard variables. However different objects may be created under varying security contexts, particularly for widely used classes such as wrapper or collection classes. This entails an important loss in precision of the analysis. We present a flowsensitive type system for statically detecting illegal flows of information in a JVM-like language that allows the level of a field to vary at different object creation points. Also, we prove a noninterference result for this language.
UR - http://www.scopus.com/inward/record.url?scp=56749157360&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=56749157360&partnerID=8YFLogxK
U2 - 10.1145/1363686.1363776
DO - 10.1145/1363686.1363776
M3 - Conference contribution
AN - SCOPUS:56749157360
SN - 9781595937537
T3 - Proceedings of the ACM Symposium on Applied Computing
SP - 347
EP - 351
BT - Proceedings of the 23rd Annual ACM Symposium on Applied Computing, SAC'08
T2 - 23rd Annual ACM Symposium on Applied Computing, SAC'08
Y2 - 16 March 2008 through 20 March 2008
ER -