Short Paper: Weak Runtime-Irrelevant Typing for Security
Paper i proceeding, 2020

Types indexed with extra type-level information are a powerful tool for statically enforcing domain-specific security properties. In many cases, this extra information is runtime-irrelevant, and so it can be completely erased at compile-time without degrading the performance of the compiled code. In practice, however, the added bureaucracy often disrupts the development process, as programmers must completely adhere to new complex constraints in order to even compile their code. In this work we present WRIT, a plugin for the GHC Haskell compiler that relaxes the type checking process in the presence of runtime-irrelevant constraints. In particular, WRIT can automatically coerce between runtime equivalent types, allowing users to run programs even in the presence of some classes of type errors. This allows us to gradually secure our code while still being able to compile at each step, separating security concerns from functional correctness. Moreover, we present a novel way to specify which types should be considered equivalent for the purpose of allowing the program to run, how ambiguity at the type level should be resolved and which constraints can be safely ignored and turned into warnings.

haskell

type checking

ghc

compilers

Författare

Matthías Páll Gissurarson

Chalmers, Data- och informationsteknik, Informationssäkerhet

Claudio Agustin Mista

Chalmers, Data- och informationsteknik, Informationssäkerhet

PLAS 2020 - Proceedings of the 15th Workshop on Programming Languages and Analysis for Security

13-17

15th ACM SIGSAC Workshop on Programming Languages and Analysis for Security, PLAS 2020, co-located with the 27th ACM Conference on Computer and Communications Security, CCS 2020
Online, USA,

Ämneskategorier

Datorteknik

Datavetenskap (datalogi)

Datorsystem

DOI

10.1145/3411506.3417595

Mer information

Senast uppdaterat

2021-01-04