DMCA
Integrating SELinux with Security-typed Languages (2007)
Cached
Download Links
| Venue: | ANNUAL SECURITY ENHANCED LINUX SYMPOSIUM |
| Citations: | 4 - 1 self |
BibTeX
@INPROCEEDINGS{Hicks07integratingselinux,
author = {Boniface Hicks and Sandra Rueda and Trent Jaeger and Patrick Mcdaniel},
title = {Integrating SELinux with Security-typed Languages},
booktitle = {ANNUAL SECURITY ENHANCED LINUX SYMPOSIUM},
year = {2007},
publisher = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Traditionally, operating systems have enforced MAC and information flow policies with minimal dependence on application programs. However, there are many cases where systems depend on user-level programs to enforce information flows. Previous approaches to handling this problem, such as privilege-separation of application components or assuming trust in application information flow enforcement, are prone to error and cumbersome to manage. On the other hand, recent advances in the area of security-typed languages have enabled the development of realistic applications with formally and automatically verified information flow controls. In this paper, we examine what it takes to integrate information flow enforcement of applications written in a security-typed extension of Java (called Jif) with SELinux. To this end, we have extended the Jif infrastructure to support interaction with SELinux security contexts, and we describe the SELinux policy and system calls which are necessary for a successful integration. We have also identified the need for further services, such as a means of formally verifying compliance between information flow policies. We have demonstrated the utility, flexibility and security of our approach by constructing a prototype multi-level secure email client.
Keyphrases
security-typed language information flow policy verified information flow control jif infrastructure application component minimal dependence system call recent advance application program user-level program information flow enforcement information flow previous approach prototype multi-level secure email client security-typed extension realistic application selinux security context successful integration application information flow enforcement selinux policy many case
