Run-time Principals in Information-flow Type Systems

Simple item page
dc.contributor.authorTse, Stephen
dc.contributor.authorZdancewic, Stephan A
dc.date2023-05-16T21:54:15.000
dc.date.accessioned2023-05-22T12:49:08Z
dc.date.available2023-05-22T12:49:08Z
dc.date.issued2004-05-01
dc.date.submitted2004-11-17T09:47:01-08:00
dc.description.abstractInformation-flow type systems are a promising approach for enforcing strong end-to-end confidentiality and integrity policies. Such policies, however, are usually specified in term of static information—data is labeled high or low security at compile time. In practice, the confidentiality of data may depend on information available only while the system is running. This paper studies language support for run-time principals, a mechanism for specifying information-flow security policies that depend on which principals interact with the system. We establish the basic property of noninterference for programs written in such language, and use run-time principals for specifying run-time authority in downgrading mechanisms such as declassification. In addition to allowing more expressive security policies, run-time principals enable the integration of language-based security mechanisms with other existing approaches such as Java stack inspection and public key infrastructures. We sketch an implementation of run-time principals via public keys such that principal delegation is verified by certificate chains.
dc.description.commentsCopyright 2004 IEEE. Reprinted from Proceedings of the 2004 IEEE Symposium on Security and Privacy (S&P 2004) pages 179-193. Publisher URL: http://ieeexplore.ieee.org/xpl/tocresult.jsp?isNumber=28916&page=1 This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of the University of Pennsylvania's products or services. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to pubs-permissions@ieee.org. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.
dc.identifier.urihttps://repository.upenn.edu/handle/20.500.14332/6579
dc.legacy.articleid1054
dc.legacy.fulltexturlhttps://repository.upenn.edu/cgi/viewcontent.cgi?article=1054&context=cis_papers&unstamped=1
dc.source.issue52
dc.source.journalDepartmental Papers (CIS)
dc.source.peerreviewedtrue
dc.source.statuspublished
dc.titleRun-time Principals in Information-flow Type Systems
dc.typePresentation
digcom.contributor.authorTse, Stephen
digcom.contributor.authorisAuthorOfPublication|email:stevez@cis.upenn.edu|institution:University of Pennsylvania|Zdancewic, Stephan A
digcom.identifiercis_papers/52
digcom.identifier.contextkey32885
digcom.identifier.submissionpathcis_papers/52
digcom.typeconference
dspace.entity.typePublication
relation.isAuthorOfPublication6ea801ee-f26c-4409-9cc9-4fef4353d51d
relation.isAuthorOfPublication.latestForDiscovery6ea801ee-f26c-4409-9cc9-4fef4353d51d
upenn.schoolDepartmentCenterDepartmental Papers (CIS)
Files
Original bundle
Now showing 1 - 1 of 1
Thumbnail Image
Name:
ieeemax63.pdf
Size:
1.51 MB
Format:
Adobe Portable Document Format
Download
Collection
Presentations