Manageable fine-grained information flow

DMCA

Manageable fine-grained information flow (2008)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Petros Efstathopoulos , Eddie Kohler

Venue:	In Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems
Citations:	31 - 2 self

BibTeX

@INPROCEEDINGS{Efstathopoulos08manageablefine-grained,
    author = {Petros Efstathopoulos and Eddie Kohler},
    title = {Manageable fine-grained information flow},
    booktitle = {In Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems},
    year = {2008},
    pages = {301--313}
}

OpenURL

Abstract

The continuing frequency and seriousness of security incidents underlines the importance of application security. Decentralized information flow control (DIFC), a promising tool for improving application security, gives application developers fine-grained control over security policy and privilege management. DIFC developers can partition much application functionality into untrusted components bound by a kernel- or language-enforced security policy. Unless a (usually smaller and less exposed) trusted component is exploited, the effects of an application compromise are contained by the policy. Although system-based DIFC can simultaneously achieve high performance and effective isolation, it offers a challenging programming model. Fine-grained policy specifications are spread over several application pieces. Common programming errors may be indistinguishable from policy exploit attempts; the system cannot expose developers to information about these errors, complicating debugging. Static checking (as in language-based DIFC) and new system primitives can reduce these problems, but for dynamic applications like web servers, they do not eliminate them. In this paper we propose subsystems that make decentralized information flow more manageable. First, a policy description language specifies an application-wide security policy in one localized place; communication restrictions are compiled into lower-level labels. Second, information flow-safe debugging mechanisms let developers debug DIFC applications without violating security policies. Although these mechanisms are preliminary, we demonstrate their effectiveness using applications similar to those developed for Asbestos and other DIFC systems.

Keyphrases

manageable fine-grained information flow security policy application security information flow-safe debugging mechanism language-based difc new system primitive application developer fine-grained control much application functionality system cannot expose developer difc developer dynamic application information flow control untrusted component lower-level label system-based difc high performance application-wide security policy security incident communication restriction language-enforced security policy programming model web server several application piece difc application static checking application compromise difc system policy exploit attempt effective isolation fine-grained policy specification policy description language promising tool information flow localized place privilege management

DMCA