Securing Class Initialization
Paper i proceeding, 2010

Language-based information-flow security is concerned with specifying and enforcing security policies for information flow via language constructs. Although much progress has been made on understanding information flow in object-oriented programs, the impact of class initialization on information flow has been so far largely unexplored. This paper turns the spotlight on security implications of class initialization. We discuss the subtleties of information propagation when classes are initialized and propose a formalization that illustrates how to track information flow in presence of class initialization by a type-and effect system for a simple language. We show how to extend the formalization to a language with exception handling.

Författare

Keiko Nakata

Chalmers, Data- och informationsteknik, Programvaruteknik (Chalmers)

Andrei Sabelfeld

Chalmers, Data- och informationsteknik, Programvaruteknik (Chalmers)

IFIP Advances in Information and Communication Technology

1868-4238 (ISSN) 1868-422X (eISSN)

Vol. 321 48-62

Styrkeområden

Informations- och kommunikationsteknik

Ämneskategorier

Programvaruteknik

Datavetenskap (datalogi)

ISBN

978-364213445-6

Mer information

Skapat

2017-10-07