ActionScript Bytecode Verification With Co-Logic Programming

A prototype security policy verification system for Action-Script binaries is presented, whose implementation leverages recent advances in co-logic programming. The authors' experience with co-logic programming indicates that it is an extremely useful paradigm for elegantly expressing algorithms that lie at the heart of model-checking technologies. This results in an unusually small trusted computing base, making the verification system well-suited to frameworks like certifying in-lined reference monitoring systems, which require small, light-weight verifiers. Preliminary experiments and progress are discussed.