Type-based Declassification for Free - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Type-based Declassification for Free

Résumé

This work provides a study to demonstrate the potential of using off-the-shelf programming languages and their theories to build sound language-based-security tools. Our study focuses on information flow security encompassing declassification policies that allow us to express flexible security policies needed for practical requirements. We translate security policies, with declassification, into an interface for which an unmodified standard typechecker can be applied to a source program---if the program typechecks, it provably satisfies the policy. Our proof reduces security soundness---with declassification---to the mathematical foundation of data abstraction, Reynolds' abstraction theorem.

Dates et versions

hal-03141398 , version 1 (15-02-2021)

Identifiants

Citer

Minh Ngo, David Naumann, Tamara Rezk. Type-based Declassification for Free. ICFEM'20, Mar 2020, Singapore, Singapore. ⟨hal-03141398⟩
31 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More