Calculational Design of Information Flow Monitors
Calculational Design of Information Flow Monitors
复制标题
信息流监视器的计算设计
DOI：
10.1109/csf.2016.22
复制
发表时间：
2016
期刊：
影响因子：
--
通讯作者：
D. Naumann
中科院分区：
文献类型：
--
作者：
Mounir Assaf;D. Naumann
细粒度的信息流监控原则上可以解决广泛的安全和隐私目标，例如在Web应用程序中。但是，很难在可接受的运行时成本和足够的精度下实现合理的监控，以避免对程序和策略的不切实际的限制。我们提出了一个系统的技术，是正确的施工监测器的设计。它包括降级的政策。该技术是基于抽象的解释，这是一个标准的程序静态分析的基础。这将使广泛的分析技术的集成，使更复杂的监测工程，以解决精度和扩展到广泛使用的编程语言的挑战。
Fine grained information flow monitoring can in principle address a wide range of security and privacy goals, for example in web applications. But it is very difficult to achieve sound monitoring with acceptable runtime cost and sufficient precision to avoid impractical restrictions on programs and policies. We present a systematic technique for design of monitors that are correct by construction. It encompasses policies with downgrading. The technique is based on abstract interpretation which is a standard basis for static analysis of programs. This should enable integration of a wide range of analysis techniques, enabling more sophisticated engineering of monitors to address the challenges of precision and scaling to widely used programming languages.
DOI：
10.1109/csf.2015.33
发表时间：
2015
期刊：
2015 IEEE 28th Computer Security Foundations Symposium
影响因子：
--
作者：
Christian Müller;Máté Kovács;Helmut Seidl
通讯作者：
Helmut Seidl