A Virtual Machine Based Information Flow Control System for Policy Enforcement
Electronic Notes in Theoretical Computer SciencePublished 1 February 2008Open access
Srijith K. Nair, Patrick N.D. Simpson, Bruno Crispo, Andrew S. Tanenbaum
Citations88
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
This paper addresses the problem of tracing implicit information flow, which had not been resolved by previous run-time systems and the additional intricacies added on by the Java architecture, and argues that the security benefits offered by Trishul are substantial enough to counter-weigh the performance overhead.
Abstract
The ability to enforce usage policies attached to data in a fine grained manner requires that the system be able to trace and control the flow of information within it. This paper presents the design and implementation of such an information flow control system, named Trishul, as a Java Virtual Machine. In particular we address the problem of tracing implicit information flow, which had not been resolved by previous run-time systems and the additional intricacies added on by the Java architecture. We argue that the security benefits offered by Trishul are substantial enough to counter-weigh the performance overhead of the system as shown by our experiments.
Keywords
Computer Science
Electronic Notes in Theoretical Computer ScienceConstructing Induction Rules for Deductive Synthesis Proofs
2,811 Citations2006Alan Bundy, Lucas Dixon +2 more
It is shown that a combination of rippling and the use of meta-variables as a least-commitment device can provide novelty in induction rule construction techniques that can introduce novel recursive structures.
Communications of the ACMA lattice model of secure information flow
1,893 Citations1976Dorothy E. Denning
The model provides a unifying view of all systems that restrict information flow, enables a classification of them according to security objectives, and suggests some new approaches to formulating the requirements of secure information flow among security classes.
IEEE Journal on Selected Areas in CommunicationsLanguage-based information-flow security
1,893 Citations2003Andrei Sabelfeld, Andrew C. Myers
A structured view of research on information-flow security is given, particularly focusing on work that uses static program analysis to enforce information- flow policies, and some important open challenges are identified.
FigshareDynamic Taint Analysis for Automatic Detection, Analysis, and Signature Generation of Exploits on Commodity Software
1,297 Citations2018James Newsome, Dawn Song
ACM Transactions on Information and System SecurityEnforceable security policies
1,266 Citations2000Fred B. Schneider
Communications of the ACMCertification of programs for secure information flow
1,025 Citations1977Dorothy E. Denning, Peter J. Denning
The mechanism can prove that a program cannot cause supposedly nonconfidential results to depend on confidential input data, and can prove that a program cannot cause supposedly nonconfidential results to depend on confidential input data.
USENIX Security SymposiumDesign and implementation of a TCG-based integrity measurement architecture
1,020 Citations2004Reiner Sailer, Xiaolan Zhang +2 more
This work shows that many of the Microsoft NGSCB guarantees can be obtained on today's hardware and today's software and that these guarantees do not require a new CPU mode or operating system but merely depend on the availability of an independent trusted entity, a TPM for example.
Operating Systems Design and ImplementationMaking information flow explicit in HiStar
424 Citations2006Nickolai Zeldovich, Silas Boyd-Wickizer +2 more
RIFLE: An Architectural Framework for User-Centric Information-Flow Security
269 Citations2005Neil Vachharajani, Matthew J. Bridges +7 more
It is proved that, contrary to statements in the literature, run-time systems like RIFLE are no less secure than existing language-based techniques, and the performance cost is reasonable.
KybernetesInside Java&#153 Platform Security: Architecture API Design and Implementation
253 Citations2000
This book is primarily for serious Java programmers and for security professionals who want to understand Java security issues both from a macro (architectural) point of view as well as from a micro (design and implementation) perspective.
The inlined reference monitor approach to security policy enforcement
183 Citations2004Fred B. Schneider, Úlfar Erlingsson
This dissertation supports the thesis that such Inlined Reference Monitors, or IRMs, offer many advantages and are a practical option in modern systems, and an IRM toolkit for Java is described in detail, using an imperative policy language that allows a security policy to be given in a single complete specification.
Fine-Grained Information Flow Analysis and Enforcement in a Java Virtual Machine
87 Citations2007Deepak Chandra, Michael Franz
An information flow framework for the Java virtual machine that combines static and dynamic techniques to capture not only explicit flows, but also implicit ones resulting from control flow that permits policy changes even while a program is running.
A Minimal Trusted Computing Base for Dynamically Ensuring Secure Information Flow
29 Citations2001Jeremy Brown, Thomas F. Knight
A sound, flexible model which dynamically ensures secure data flow with respect to a lattice-based information flow policy, with security classification on a per-word basis is presented, and a set of hardware mechanisms are presented which enable the practical implementation of the model.
Software Practice and ExperienceMemoryless execution: A programmer's viewpoint
20 Citations1976Israel Gat, Harry J. Saal
A set of rules for memoryless execution on third‐gene ration computer systems is presented and it is shown that the impact of the solution on operating system design is modest and programming generality among memoryless programs is maintained.
Dynamic label binding at run-time
19 Citations2003Yolanta Beres, Chris I. Dalton
This paper introduces a pragmatic new approach for tracking information flow while the process is running at the same time applying dynamic label binding.
Information flow analysis and enforcement in java bytecode
8 Citations2006Michael Franz, Deepak Chandra