Title
Deriving an Information Flow Checker and Certifying Compiler for Java
Abstract
Language-based security provides a means to enforce endto- end confidentiality and integrity policies inmobile code scenarios, and is increasingly being contemplated by the smartcard and mobile phone industry as a solution to enforce information flow and resource control policies. Two threads of work have emerged in research on languagebased security: work that focuses on enforcing security policies for source code, which is tailored towards developers that want to increase confidence in their applications, and work that focuses on efficiently verifying similar policies for bytecode, which is tailored to code consumers that want to protect themselves against hostile applications. These lines of work serve different purposes - and thus have been developed independently but connecting them is a key step towards the deployment of language-based security in practical applications. This paper introduces a systematic technique to connect source code and bytecode security type systems. The technique is applied to an information flow type system for a fragment of Java with exceptions, thus confronting challenges in both control and data flow tracking.
Year
DOI
Venue
2006
10.1109/SP.2006.13
IEEE Symposium on Security and Privacy
Keywords
Field
DocType
certifying compiler,language-based security,languagebased security,source code,security policy,information flow type system,information flow,bytecode security type system,integrity policies inmobile code,systematic technique,information flow checker,resource control policy,type system,information security,data security,control systems,smart card,java,data flow analysis
Data security,Language-based security,Computer security,Information security standards,Computer science,Source code,Information security,Compiler,Security policy,Bytecode
Conference
ISSN
ISBN
Citations 
1081-6011
0-7695-2574-1
27
PageRank 
References 
Authors
0.90
17
3
Name
Order
Citations
PageRank
Gilles Barthe12337152.36
Tamara Rezk247522.41
David Naumann3110184.12