Flexible Dynamic Information Flow Control in Haskell
Paper i proceeding, 2011

We describe a new, dynamic, floating-label approach to language-based information flow control, and present an implementation in Haskell. A labeled IO monad, LIO, keeps track of a current label and permits restricted access to IO functionality, while ensuring that the current label exceeds the labels of all data observed and restricts what can be modified. Unlike other language-based work, LIO also bounds the current label with a current clearance that provides a form of discretionary access control. In addition, programs may encapsulate and pass around the results of computations with different labels. We give precise semantics and prove confidentiality and integrity properties of the system.

Författare

Deian Stefan

Stanford University

Alejandro Russo

Chalmers, Data- och informationsteknik, Programvaruteknik

John Mitchell

Stanford University

David Mazieres

Stanford University

ACM SIGPLAN Haskell Symposium 2011

95-106

Styrkeområden

Informations- och kommunikationsteknik

Ämneskategorier

Programvaruteknik

Datavetenskap (datalogi)

DOI

10.1145/2034675.2034688

ISBN

978-145030860-1