Flexible Dynamic Information Flow Control in Haskell
Paper in proceedings, 2011

We describe a new, dynamic, floating-label approach to language-based information flow control, and present an implementation in Haskell. A labeled IO monad, LIO, keeps track of a current label and permits restricted access to IO functionality, while ensuring that the current label exceeds the labels of all data observed and restricts what can be modified. Unlike other language-based work, LIO also bounds the current label with a current clearance that provides a form of discretionary access control. In addition, programs may encapsulate and pass around the results of computations with different labels. We give precise semantics and prove confidentiality and integrity properties of the system.


Deian Stefan

Stanford University

Alejandro Russo

Chalmers, Computer Science and Engineering (Chalmers), Software Technology (Chalmers)

John Mitchell

Stanford University

David Mazieres

Stanford University

ACM SIGPLAN Haskell Symposium 2011

978-145030860-1 (ISBN)

Areas of Advance

Information and Communication Technology

Subject Categories

Software Engineering

Computer Science





More information

Latest update

3/6/2018 1