Calculational Design of Information Flow Monitors

Fine grained information flow monitoring can in principle address a wide range of security and privacy goals, for example in web applications. But it is very difficult to achieve sound monitoring with acceptable runtime cost and sufficient precision to avoid impractical restrictions on programs and...

Full description

Saved in:
Bibliographic Details
Published in2016 IEEE 29th Computer Security Foundations Symposium (CSF) pp. 210 - 224
Main Authors Assaf, Mounir, Naumann, David A.
Format Conference Proceeding Journal Article
LanguageEnglish
Published IEEE 01.06.2016
Subjects
Complexity theory
Computer information security
Design analysis
Design engineering
Information flow
Monitoring
Monitors
Policies
Run time (computers)
Runtime
Safety
Security
Semantics
Online AccessGet full text

Cover

More Information
Summary:Fine grained information flow monitoring can in principle address a wide range of security and privacy goals, for example in web applications. But it is very difficult to achieve sound monitoring with acceptable runtime cost and sufficient precision to avoid impractical restrictions on programs and policies. We present a systematic technique for design of monitors that are correct by construction. It encompasses policies with downgrading. The technique is based on abstract interpretation which is a standard basis for static analysis of programs. This should enable integration of a wide range of analysis techniques, enabling more sophisticated engineering of monitors to address the challenges of precision and scaling to widely used programming languages.
Bibliography:ObjectType-Article-2
SourceType-Scholarly Journals-1
ObjectType-Conference-1
ObjectType-Feature-3
content type line 23
SourceType-Conference Papers & Proceedings-2
ISSN:2374-8303
DOI:10.1109/CSF.2016.22