Flexible Dynamic Information Flow Control in Haskell
Journal article, 2011

We describe a new, dynamic, floating-label approach to language-based information flow control, and present an implementation in Haskell. A labeled IO monad, LIO, keeps track of a current label and permits restricted access to IO functionality, while ensuring that the current label exceeds the labels of all data observed and restricts what can be modified. Unlike other language-based work, LIO also bounds the current label with a current clearance that provides a form of discretionary access control. In addition, programs may encapsulate and pass around the results of computations with different labels. We give precise semantics and prove confidentiality and integrity properties of the system.

Monad

model

Library

Information flow control

Security

arrows

security

Design

Languages

Author

D. Stefan

Stanford University

Alejandro Russo

Chalmers, Computer Science and Engineering (Chalmers), Software Technology (Chalmers)

J. C. Mitchell

Stanford University

D. Mazieres

Stanford University

SIGPLAN Notices (ACM Special Interest Group on Programming Languages)

07308566 (ISSN)

Vol. 46 12 95-106

Subject Categories

Software Engineering

DOI

10.1145/2096148.2034688

More information

Latest update

3/6/2018 1