Paper Info
Title
Confidentiality for mobile code: the case of a simple payment protocol
Abstract
We propose an approach to support confidentiality for mobile implementations of security-sensitive protocols using Java/JVM. An applet which receives and passes on confidential information onto a public network has a rich set of direct and indirect channels available to it. The problem is to constrain applet behaviour to prevent those leakages that are unintended while preserving those that are specified in the protocol. We use an approach based on the idea of correlating changes in observable behaviour with changes in input. In the special case where no changes in (low) behaviour are possible we retrieve a version of noninterference. Mapping our approach to JVM a number of particular concerns need to be addressed, including the use of object libraries for IO, the use of labelling to track input/output of secrets, and the choice of proof strategy. We use the bisimulation proof technique. To provide user feedback we employ a variant of proof-carrying code to instrument a security assistant which will let users of an applet inquire about its security properties such as the destination of data input into different fields
Year
DOI
Venue
2000
10.1109/CSFW.2000.856940
Cambridge
Keywords
Field
DocType
Java,bisimulation equivalence,data privacy,distributed programming,object-oriented programming,protocols,security of data,software libraries,JVM,Java,applet,bisimulation proof,data security,mobile code confidentiality,noninterference,object libraries,proof strategy,security-sensitive protocols,simple payment protocol,user feedback
Information flow (information theory),Data security,Object-oriented programming,Computer science,Computer security,Computer-aided software engineering,Java applet,Information privacy,Java,Distributed computing,Special case
Conference
ISSN
ISBN
Citations 
1063-6900
0-7695-0671-2
16
PageRank 
References 
Authors
1.39
10
2
Name
Order
Citations
PageRank
Mads Dam175461.86
Pablo Giambiagi2435.06