Jifclipse: Development Tools for Security-Typed Languages

Security-typed languages such as Jif require the programmer to label variables with information flow security policies as part of application development. The compiler then flags errors wherever information leaks may occur. Resolving these information leaks is a critical task in security-typed language application development. Unfortunately, because information flows can be quite subtle, simple error messages tend to be insufficient for finding and resolving the source of information leaks; more sophisticated development tools are needed for this task. To this end the authors provide a set of principles to guide the development of such tools. Furthermore, they implement a subset of these principles in an Integrated Development Environment (IDE) for Jif, called Jifclipse, which is built on the Eclipse extensible development platform.