Flexible Dynamic Information Flow Control in Haskell
Artikel i vetenskaplig tidskrift, 2011

We describe a new, dynamic, floating-label approach to language-based information flow control, and present an implementation in Haskell. A labeled IO monad, LIO, keeps track of a current label and permits restricted access to IO functionality, while ensuring that the current label exceeds the labels of all data observed and restricts what can be modified. Unlike other language-based work, LIO also bounds the current label with a current clearance that provides a form of discretionary access control. In addition, programs may encapsulate and pass around the results of computations with different labels. We give precise semantics and prove confidentiality and integrity properties of the system.

Monad

model

Library

Information flow control

Security

arrows

security

Design

Languages

Författare

D. Stefan

Stanford University

Alejandro Russo

Chalmers, Data- och informationsteknik, Programvaruteknik

J. C. Mitchell

Stanford University

D. Mazieres

Stanford University

SIGPLAN Notices (ACM Special Interest Group on Programming Languages)

0362-1340 (ISSN)

Vol. 46 95-106

Ämneskategorier

Programvaruteknik

DOI

10.1145/2096148.2034688