Value Sensitivity and Observable Abstract Values for Information Flow Control
Value Sensitivity and Observable Abstract Values for Information Flow Control
复制标题
信息流控制的值敏感性和可观察的抽象值
DOI：
--
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
A. Sabelfeld
中科院分区：
文献类型：
--
作者：
Luciano Bello;Daniel Hedin;A. Sabelfeld
最近在信息流控制方面取得了很大进展，使得能够为越来越富有表现力的编程语言执行越来越丰富的策略。这就产生了用于主流编程语言（如JavaScript、Java、Caml和Ada）的工具，这些工具可以强制执行通用的安全策略。然而，阻碍这些工具被广泛采用的一个障碍是它们有限的许可性和高误报率。已经提出了流、上下文和对象敏感技术，以提高静态信息流控制的精度，并且已经探索了动态监视器，以利用有关当前运行的知识来提高精度。
Much progress has recently been made on information flow control, enabling the enforcement of increasingly rich policies for increasingly expressive programming languages. This has resulted in tools for mainstream programming languages as JavaScript, Java, Caml, and Ada that enforce versatile security policies. However, a roadblock on the way to wider adoption of these tools has been their limited permissiveness high number of false positives. Flow-, context-, and object-sensitive techniques have been suggested to improve the precision of static information flow control and dynamic monitors have been explored to leverage the knowledge about the current run for precision.
This paper explores value sensitivity to boost the permissiveness of information flow control. We show that both dynamic and hybrid information flow mechanisms benefit from value sensitivity. Further, we introduce the concept of observable abstract values to generalize and leverage the power of value sensitivity to richer programming languages. We demonstrate the usefulness of the approach by comparing it to known disciplines for dealing with information flow in dynamic and hybrid settings.