DMCA
Paralocks -- Role-based Information Flow Control . . . (2010)
| Citations: | 19 - 0 self |
BibTeX
@MISC{Broberg10paralocks--,
author = {Niklas Broberg and David Sands},
title = {Paralocks -- Role-based Information Flow Control . . . },
year = {2010}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper presents Paralocks, a language for building expressive but statically verifiable fine-grained information flow policies. Paralocks combine the expressive power of Flow Locks (Broberg & Sands, ESOP’06) with the ability to express policies involving runtime principles, roles (in the style of role-based access control), and relations (such as “acts-for ” in discretionary access control). We illustrate the Paralocks policy language by giving a simple encoding of Myers and Liskov’s Decentralized Label Model (DLM). Furthermore – and unlike the DLM – we provide an information flow semantics for full Paralock policies. Lastly we illustrate how Paralocks can be statically verified by providing a simple programming language incorporating Paralock policy specifications, and a static type system which soundly enforces information flow security according to the Paralock semantics.
Keyphrases
paralocks role-based information flow control runtime principle verifiable fine-grained information flow policy discretionary access control decentralized label model information flow semantics broberg sand expressive power static type system paralock semantics simple programming language paralock policy specification role-based access control full paralock policy information flow security simple encoding flow lock paralocks policy language
