Modular and Constraint-Based Information Flow Inference for an Object-Oriented Language
Modular and Constraint-Based Information Flow Inference for an Object-Oriented Language
复制标题
面向对象语言的模块化和基于约束的信息流推理
DOI：
10.1007/978-3-540-27864-1_9
复制
发表时间：
2004
期刊：
影响因子：
--
通讯作者：
D. Naumann
中科院分区：
文献类型：
--
作者：
Qi Sun;A. Banerjee;D. Naumann
本文解决了检查用面向对象语言编写的程序以确保它们满足信息流策略、机密性和完整性的问题。策略是使用安全类型指定的。提出了一种以模块化方式推断此类安全类型的算法。算法的规范涉及库的推理。库类和方法可以通过安全级别进行参数化。展示了如何在存在方法继承和重写的情况下实现模块化推理。给出了推理算法的健全性和完整性定理。
This paper addresses the problem of checking programs written in an object-oriented language to ensure that they satisfy the information flow policies, confidentiality and integrity. Policy is specified using security types. An algorithm that infers such security types in a modular manner is presented. The specification of the algorithm involves inference for libraries. Library classes and methods maybe parameterized by security levels. It is shown how modular inference is achieved in the presence of method inheritance and override. Soundness and completeness theorems for the inference algorithm are given.