Faceted execution of policy-agnostic programs
Faceted execution of policy-agnostic programs
复制标题
与政策无关的程序的分面执行
DOI：
10.1145/2465106.2465121
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Armando Solar
中科院分区：
文献类型：
--
作者：
Thomas H. Austin;Jean Yang;C. Flanagan;Armando Solar
对于应用程序保护敏感数据很重要。即使为了简单的机密性和完整性政策，程序员通常也很难理解政策应如何互动以及如何在整个程序中执行策略。一种有前途的方法是政策不可策划的编程，该模型允许程序员与核心功能分开实施策略。杨等。描述Jeeves，一种编程语言，该语言支持信息流策略，描述了如何在不同的输出渠道中揭示敏感值。 Jeeves使用符号评估和约束解决方案来产生遵守政策的输出。该策略提供了强大的机密性保证，但限制了表现力和实施可行性。
我们以尺寸的值扩展了jeeves，从而利用敏感值的结构来产生更大的表现力并促进有关运行时行为的推理。我们提出了用于Jeeves的刻面语义，并描述了一个模型，用于通过程序传播敏感信息的多种视图。我们提供了对终止不敏感的非干预证明，并描述语义如何促进有关程序行为的推理。
It is important for applications to protect sensitive data. Even for simple confidentiality and integrity policies, it is often difficult for programmers to reason about how the policies should interact and how to enforce policies across the program. A promising approach is policy-agnostic programming, a model that allows the programmer to implement policies separately from core functionality. Yang et al. describe Jeeves, a programming language that supports information flow policies describing how to reveal sensitive values in different output channels. Jeeves uses symbolic evaluation and constraint-solving to produce outputs adhering to the policies. This strategy provides strong confidentiality guarantees but limits expressiveness and implementation feasibility.
We extend Jeeves with faceted values, which exploit the structure of sensitive values to yield both greater expressiveness and to facilitate reasoning about runtime behavior. We present a faceted semantics for Jeeves and describe a model for propagating multiple views of sensitive information through a program. We provide a proof of termination-insensitive non-interference and describe how the semantics facilitate reasoning about program behavior.
DOI：
10.1145/1111037.1111045
发表时间：
2006-01
期刊：
--
影响因子：
--
作者：
Sebastian Hunt;David Sands
通讯作者：
Sebastian Hunt;David Sands