Abstract

) Matthew Hennessy 1 and James Riely 2 1 COGS, University of Sussex, UK email:matthewh@cogs.sussex.ac.uk, home page: http://www.cogs.susx.ac.uk/users/matthewh/ 2 DePaul University, US email:jriley@cs.depaul.edu home page: http://www.depaul.edu/ jriely/ Abstract. We propose an extension of the asynchronous -calculus in which a variety of security properties may be captured using types. These are an extension of the Input/Output types for the -calculus in which I/O capabilities are assigned specific security levels. We define a typing system which ensures that processes running at security level oe cannot access resources with a security level higher than oe. The notion of access control guaranteed by this system is formalized in terms of a Type Safety theorem. We then show that, for a certain class of processes, our system prohibits implicit information flow from high-level to low-level processes. We prove that low-level behaviour can not be influenced by changes ...

Citations