A Principled Approach to Tracking Information Flow in the Presence of Libraries

DOI10.1007/978-3-662-54455-6_3MaRDI QIDQ3304806zbMATH OpenOpenAlexFDO

Authors Daniel Hedin, Alexander Sjösten, Frank Piessens, Andrei Sabelfeld

Publication date 3 August 2020

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL https://lirias.kuleuven.be/handle/123456789/578854

zbMATH Keywords

core languagelabel semanticlibrary functionlibrary modelpolicy language

Mathematics Subject Classification ID

Mathematical aspects of software engineering (specification, verification, metrics, requirements, etc.) (68N30) Semantics in the theory of computing (68Q55)

Recommendations

• Information Flow Tracking for Side-Effectful Libraries
• Security through safety. An approach to information flow control based on derivation of safety properties from a characterisation of insecure behaviour
• A semantic approach to secure information flow
• Secure information flow by self-composition
• Compile-time detection of information flow in sequential programs

Cites work

• Contracts for higher-order functions
• Contracts made manifest
• Correct blame for contracts, no more scapegoating
• Multiple facets for dynamic information flow
• Value sensitivity and observable abstract values for information flow control

Cited in

(6)

• Gaining trust by tracing security protocols
• Flexible manipulation of labeled values for information-flow control libraries
• Automated inference of library specifications for source-sink property verification
• Tracking Information Flow in Dynamic Tree Structures
• Value sensitivity and observable abstract values for information flow control
• Information Flow Tracking for Side-Effectful Libraries

Describes a project that uses

Uses Software

• WebKit
• node-ffi
• FlowFox
• Node.js
• JSFlow

This page was built for publication: A Principled Approach to Tracking Information Flow in the Presence of Libraries

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q3304806)