Capabilities as alias control: Secure cooperation in dynamically extensible systems

Capabilities as alias control: Secure cooperation in dynamically extensible systems (2004)

Cached

Download Links

by Philip W. L. Fong , Cheng Zhang

Venue:	DEPARTMENT OF COMPUTER SCIENCE, UNIVERSITY OF REGINA
Citations:	5 - 3 self

Versions

Version History

Metadata Version 3

User correction supplied by mph

Datum	Value	Source
TITLE	Capabilities as alias control: Secure cooperation in dynamically extensible systems	INFERENCE
AUTHOR NAME	Philip W. L. Fong	user correction
AUTHOR AFFIL	Department of Computer Science; University of Regina	user correction
AUTHOR ADDR	Regina, Saskatchewan, Canada S4S 0A2	user correction
AUTHOR NAME	Cheng Zhang	user correction
AUTHOR AFFIL	Department of Computer Science; University of Regina	user correction
AUTHOR ADDR	Regina, Saskatchewan, Canada S4S 0A2	user correction
ABSTRACT	Secure cooperation is the problem of protecting mutually suspicious code units within the same execution environment from their potentially malicious peers. A statically enforceable capability type system is proposed for the JVM bytecode language to provide fine-grained access control of shared resources among peer code units. The design of the type system is inspired by recent advances in alias control type systems for object-oriented programming languages. The exercise of access rights and the propagation of capabilities are given a uniform interpretation as alias creation events. Each capability type assigns to a reference a dataflow trajectory, prescribing the set of aliases that is allowed to be created from the reference. An orthogonal and complementary type system for controlling object creation and downcasting is also designed to avoid a class of capability spoofing attacks. The combined type system successfully addresses a number of classical protection problems recast in a programming language context. This work therefore demonstrates the need and the feasibility of a languagebased approach to enforce application-level security among peer code units.	user correction
YEAR	2004	SVM HeaderParse 0.2
VENUE	DEPARTMENT OF COMPUTER SCIENCE, UNIVERSITY OF REGINA	user correction
VENUE TYPE	TECHREPORT	INFERENCE
PAGES	0--7731	INFERENCE
VOLUME	27	INFERENCE
TECH	Technical Report CS-2004-3	INFERENCE
CITATIONS	44 found	ParsCit 1.0