Checking secure information flow in Java bytecode by code transformation and standard bytecode verification

2004 ◽  
Vol 34 (13) ◽  
pp. 1225-1255 ◽  
Author(s):  
C. Bernardeschi ◽  
N. De Francesco ◽  
G. Lettieri ◽  
L. Martini
Keyword(s):  
Information Flow ◽  
Code Transformation ◽  
Bytecode Verification ◽  
Java Bytecode ◽  
Secure Information

Java bytecode verification for secure information flow

2003 ◽  
Vol 38 (12) ◽  
pp. 20-27 ◽  
Author(s):  
Marco Avvenuti ◽  
Cinzia Bernardeschi ◽  
Nicoletta De Francesco
Keyword(s):  
Information Flow ◽  
Bytecode Verification ◽  
Java Bytecode ◽  
Secure Information

A uniform type structure for secure information flow

2002 ◽  
Vol 37 (1) ◽  
pp. 81-92 ◽  
Author(s):  
Kohei Honda ◽  
Nobuko Yoshida
Keyword(s):  
Information Flow ◽  
Type Structure ◽  
Secure Information

scholarly journals GARUDA: Designing Energy-Efficient Hardware Monitors From High-Level Policies for Secure Information Flow

2018 ◽  
Vol 37 (11) ◽  
pp. 2509-2518
Author(s):  
Seaghan Sefton ◽  
Taiman Siddiqui ◽  
Nathaniel St. Amour ◽  
Gordon Stewart ◽  
Avinash Karanth Kodi
Keyword(s):  
Information Flow ◽  
Energy Efficient ◽  
Secure Information ◽  
High Level

scholarly journals A Method for Model-Driven Information Flow Security

2012 ◽  
pp. 199-229 ◽  
Author(s):  
Fredrik Seehusen ◽  
Ketil Stølen
Keyword(s):  
Software Development ◽  
Information Flow ◽  
System Architecture ◽  
Security Requirements ◽  
State Machines ◽  
Flow Properties ◽  
Information Flow Security ◽  
Software Developer ◽  
Model Driven ◽  
Secure Information

We present a method for software development in which information flow security is taken into consideration from start to finish. Initially, the user of the method (i.e., a software developer) specifies the system architecture and selects a set of security requirements (in the form of secure information flow properties) that the system must adhere to. The user then specifies each component of the system architecture using UML inspired state machines, and refines/transforms these (abstract) state machines into concrete state machines. It is shown that if the abstract specification adheres to the security requirements, then so does the concrete one provided that certain conditions are satisfied.

Sign in / Sign up

Export Citation Format

Share Document