A static secure flow analyzer for a subset of Java

Download
Author
Harvey, James D.
Date
1998-03-01Advisor
Volpano, Dennis M.
Second Reader
Rasmussen, Craig W.
Metadata
Show full item recordAbstract
As the number of computers and computer systems in existence has grown over the past few decades, we have come to depend on them to maintain the security of private or sensitive information. The execution of a program may cause leaks of private or sensitive information from the computer. Static secure flow analysis is an attempt to detect these leaks prior to program execution. It is possible to analyze programs by hand, but this is often impractical for large programs. A better approach is to automate the analysis, which is what this thesis explores. We describe some previous research and give background information about secure flow analysis. A secure flow analyzer is presented. It implements a secure flow type inference algorithm, for a subset of Java 1.0.2, using a parser generator called Java Compiler Compiler (JavaCC). Semantic actions are inserted into a grammar specification to perform the secure flow analysis on a given program
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.Collections
Related items
Showing items related by title, author, creator and subject.
-
First term attrition of fundamental applied skills training (FAST) students
Hickox, Jeffrey W. (Monterey, California. Naval Postgraduate School, 1998-03-01);As the number of computers and computer systems in existence has grown over the past few decades, we have come to depend on them to maintain the security of private or sensitive information. The execution of a program may ... -
Web-based dissemination system for the Trusted Computing Exemlar [i.e. Exemplar] project
Kane, Douglas Robert. (Monterey, California. Naval Postgraduate School, 2005-06);Open dissemination of the Trusted Computing Exemplar (TCX) project is needed. This dissemination must include methods to provide secure web access to project material, integrity verification of data, and group-based ... -
An implementation of secure flow type inference for a subset of Java
Akdemir, Ismail Okan (Monterey, California. Naval Postgraduate School, 1998-09);Smart cards play an important role in a digital society. A smart card contains memory or an embedded microprocessor with the capability of enabling a wide variety of services, such as electronic cash in the case of memory ...