Secure Information Flow as a Safety Problem
Secure Information Flow as a Safety Problem
复制标题
DOI：
10.1007/11547662_24
复制
发表时间：
2005-09
期刊：
影响因子：
--
通讯作者：
Tachio Terauchi;A. Aiken
中科院分区：
文献类型：
--
作者：
Tachio Terauchi;A. Aiken
通过简单的程序变换，可以将终端不敏感的安全信息流问题归结为解决安全问题。Barthe、D‘argenio和Rezk创造了“自我合成”一词来描述这种减少。本文用Li和Zdancewic最近提出的一种信息降级的形式推广了自组成方法。我们还确定了在实践中应用自组合方法存在的问题，并提出了使用更传统的基于类型的方法来解决此问题的方案。其结果是一个结合了这两个领域的优点的框架，即比传统的基于类型的方法更好，也比自我组合方法更好。
The termination insensitive secure information flow problem can be reduced to solving a safety problem via a simple program transformation. Barthe, D’Argenio, and Rezk coined the term “self-composition” to describe this reduction. This paper generalizes the self-compositional approach with a form of information downgrading recently proposed by Li and Zdancewic. We also identify a problem with applying the self-compositional approach in practice, and we present a solution to this problem that makes use of more traditional type-based approaches. The result is a framework that combines the best of both worlds, i.e., better than traditional type-based approaches and better than the self-compositional approach.