Certification of Programs for Secure Information Flow

DMCA

Certification of Programs for Secure Information Flow (1977)

Cached

Download Links

by Dorothy E. Denning , Peter J. Denning

Citations:

490 - 1 self

BibTeX

@MISC{Denning77certificationof,
    author = {Dorothy E. Denning and Peter J. Denning},
    title = { Certification of Programs for Secure Information Flow},
    year = {1977}
}

OpenURL

Abstract

This paper presents a certification mechanism for verifying the secure flow of information through a program. Because it exploits the properties of a lattice structure among security classes, the procedure is sufficiently simple that it can easily be included in the analysis phase of most existing compilers. Appropriate semantics are presented and proved correct. An important application is the confinement problem: The mechanism can prove that a program cannot cause supposedly nonconfidential results to depend on confidential input data.

Keyphrases

secure information flow r.s. gaines system editor certification program cannot cause lattice structure secure flow impor-tant application nonconfidential result confi-dential input data analysis phase confinement problem security class certification mechanism appropriate semantics

DMCA