Securing Class Initialization in Java-like Languages

Language-based information-flow security is concerned with specifying and enforcing security policies for information flow via language constructs. Although much progress has been made on understanding information flow in object-oriented programs, little attention has been given to the impact of cla...

Celý popis

Uložené v:
Podrobná bibliografia
Vydané v:IEEE transactions on dependable and secure computing Ročník 10; číslo 1; s. 1 - 13
Hlavní autori: Rafnsson, W., Nakata, K., Sabelfeld, A.
Médium: Journal Article
Jazyk:English
Vydavateľské údaje: Washington IEEE 01.01.2013
IEEE Computer Society
Predmet:
bytecode verification
Computer information security
Construction specifications
Context
Data integrity
Error recovery
Hierarchies
Information flow
Information flow control
Java
Lattices
Leaking of information
Loading
noninterference
Object oriented
Object oriented programming
program analysis
programs
Security
Security management
Semantics
Studies
Syntactics
ISSN:1545-5971, 1941-0018, 1941-0018
On-line prístup:Získať plný text
Tagy: Pridať tag
Žiadne tagy, Buďte prvý, kto otaguje tento záznam!
Popis
Shrnutí:Language-based information-flow security is concerned with specifying and enforcing security policies for information flow via language constructs. Although much progress has been made on understanding information flow in object-oriented programs, little attention has been given to the impact of class initialization on information flow. This paper turns the spotlight on security implications of class initialization. We reveal the subtleties of information propagation when classes are initialized, and demonstrate how these flows can be exploited to leak information through error recovery. Our main contribution is a type-and-effect system which tracks these information flows. The type system is parameterized by an arbitrary lattice of security levels. Flows through the class hierarchy and dependencies in field initializers are tracked by typing class initializers wherever they could be executed. The contexts in which each class can be initialized are tracked to prevent insecure flows of out-of-scope contextual information through class initialization statuses and error recovery. We show that the type system enforces termination-insensitive noninterference.
Bibliografia:SourceType-Scholarly Journals-1
ObjectType-Feature-1
content type line 14
ObjectType-Article-2
content type line 23
ISSN:1545-5971
1941-0018
1941-0018
DOI:10.1109/TDSC.2012.73