Secure Flow Typing
Abstract
Some of the most promising work in the area of enforcing secure information flow in programs is based on static analyses of source code. However, as yet, these efforts have not had much impact in practice. We present a new approach to analyzing programs statically for secrecy and integrity flow violations. The analysis is characterized as a form of type inference in a secure flow type system. The type system provides a uniform frame work for traditional type checking of programs and information flow control Type correct programs have principal types that characterize how they can be called securely. Applications of the type system include flow analysis of legacy code as well as code written in newly emerging Web languages like Java (tm).
Description
The article of record as published may be located at http://dx.doi.org/10.1016/S0167-4048(97)00002-3
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.Related items
Showing items related by title, author, creator and subject.
-
Reforming the U.S. security assistance export process to build existing capabilities
Stokes, John E., Jr. (Monterey, California: Naval Postgraduate School, 2015-12);Security assistance is a key element in the formulation of foreign policy in the United States. The Department of State, the Department of Defense, and other agencies are involved in planning and managing the programs. ... -
Budgetary Consequences of Defense Expenditures in Pakistan: Short-Run Impacts and Long-Run Adjustments
Fredericksen, P.C.; Looney, R.E. (1994-02);In the last twenty years, there has been a growing interest in quantifying the 'guns versus butter' tradeoff facing developing countries. This article examines Pakistan's military expenditures between 1973 and 1986 and ... -
Army Acquisition and Contracting Personnel requirements: how are the Army's current recruitment, development and retention programs meeting current and future personnel requirements?
Allen, Karen E.; Doran, James W.; Westbrook, Bonnie L. (Monterey, California. Naval Postgraduate School, 2011-09);The Defense (DoD) is realizing a current and expected future shortage in experienced acquisition and contracting personnel due, in part, to a hiring freeze in the middle 1990s and the number of personnel that are eligible ...