Dynamic Security Labels and Static Information Flow Control

Provided by: Cornell University
Topic: Security
Format: PDF
In this paper, the authors present a language in which information flow is securely controlled by a type system, yet the security class of data can vary dynamically. Information flow policies provide the means to express strong security requirements for data confidentiality and integrity. Recent work on security-typed programming languages has shown that information flow can be analyzed statically, ensuring that programs will respect the restrictions placed on data. However, real computing systems have security policies that cannot be determined at the time of program analysis.

Find By Topic