Multiple facets for dynamic information flow

DOI10.1145/2103656.2103677MaRDI QIDQ2942868zbMATH OpenOpenAlexWikidataFDO

Authors Thomas H. Austin, Cormac Flanagan

Publication date 11 September 2015

Published in Proceedings of the 39th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages (Search for Journal in Brave)

Full work available at URL http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.421.3124

zbMATH Keywords

dynamic analysisinformation flow controlJavaScriptweb security

Mathematics Subject Classification ID

Internet topics (68M11) Other programming paradigms (object-oriented, sequential, concurrent, automatic, etc.) (68N19)

Recommendations

• Survey on JavaScript security policies and their enforcement mechanisms in a web browser
• Programming Languages and Systems
• Spot the difference: secure multi-execution and multiple facets
• Value sensitivity and observable abstract values for information flow control
• Implicit flows in malicious and nonmalicious code

Cited in

(9)

• A survey of challenges for runtime verification from advanced application domains (beyond software)
• Spot the difference: secure multi-execution and multiple facets
• Survey on JavaScript security policies and their enforcement mechanisms in a web browser
• Information flow analysis for valued-indexed data security compartments
• Self-adaptation and secure information flow in multiparty communications
• Tracking Information Flow in Dynamic Tree Structures
• A Principled Approach to Tracking Information Flow in the Presence of Libraries
• Basic Definitions and Test Scenarios
• Gray-box runtime enforcement of hyperproperties

Describes a project that uses

Uses Software

• Jif
• ZaphodFacetes
• JavaScript
• Narcissus

This page was built for publication: Multiple facets for dynamic information flow

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2942868)