mdh.sePublikationer
Ändra sökning
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf
Value Sensitivity and Observable Abstract Values for Information Flow Control
Chalmers University of Technology, Gothenburg, Sweden.
Mälardalens högskola, Akademin för innovation, design och teknik, Inbyggda system. Chalmers University of Technology, Gothenburg, Sweden.ORCID-id: 0000-0002-6621-8390
Chalmers University of Technology, Gothenburg, Sweden.
2015 (Engelska)Ingår i: 20th International Conference on Logic for Programming, Artificial Intelligence and Reasoning LPAR'15, 2015, s. 63-78Konferensbidrag, Publicerat paper (Refereegranskat)
Abstract [en]

Much progress has recently been made on information flow control, enabling the enforcement of increasingly rich policies for increasingly expressive programming languages. This has resulted in tools for mainstream programming languages as JavaScript, Java, Caml, and Ada that enforce versatile security policies. However, a roadblock on the way to wider adoption of these tools has been their limited permissiveness (high number of false positives). Flow-, context-, and object-sensitive techniques have been suggested to improve the precision of static information flow control and dynamic monitors have been explored to leverage the knowledge about the current run for precision. This paper explores value sensitivity to boost the permissiveness of information flow control. We show that both dynamic and hybrid information flow mechanisms benefit from value sensitivity. Further, we introduce the concept of observable abstract values to generalize and leverage the power of value sensitivity to richer programming languages. We demonstrate the usefulness of the approach by comparing it to known disciplines for dealing with information flow in dynamic and hybrid settings.

Ort, förlag, år, upplaga, sidor
2015. s. 63-78
Nationell ämneskategori
Datorsystem
Identifikatorer
URN: urn:nbn:se:mdh:diva-30487DOI: 10.1007/978-3-662-48899-7_5ISI: 000375574900005Scopus ID: 2-s2.0-84952650183ISBN: 978-3-662-48898-0 (tryckt)OAI: oai:DiVA.org:mdh-30487DiVA, id: diva2:885952
Konferens
20th International Conference on Logic for Programming, Artificial Intelligence and Reasoning LPAR'15, 23 Nov 2015, Suva, Fiji
Tillgänglig från: 2015-12-21 Skapad: 2015-12-21 Senast uppdaterad: 2017-01-03Bibliografiskt granskad

Open Access i DiVA

Fulltext saknas i DiVA

Övriga länkar

Förlagets fulltextScopus

Personposter BETA

Hedin, Daniel

Sök vidare i DiVA

Av författaren/redaktören
Hedin, Daniel
Av organisationen
Inbyggda system
Datorsystem

Sök vidare utanför DiVA

GoogleGoogle Scholar

doi
isbn
urn-nbn

Altmetricpoäng

doi
isbn
urn-nbn
Totalt: 42 träffar
RefereraExporteraLänk till posten
Permanent länk

Direktlänk
Referera
Referensformat
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Annat format
Fler format
Språk
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Annat språk
Fler språk
Utmatningsformat
  • html
  • text
  • asciidoc
  • rtf