scholarly journals Secure serverless computing using dynamic information flow control

2018 ◽  
Vol 2 (OOPSLA) ◽  
pp. 1-26 ◽  
Author(s):  
Kalev Alpernas ◽  
Cormac Flanagan ◽  
Sadjad Fouladi ◽  
Leonid Ryzhyk ◽  
Mooly Sagiv ◽  
...  
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Information Flow Control ◽  
Dynamic Information

scholarly journals Flexible dynamic information flow control in the presence of exceptions

2017 ◽  
Vol 27 ◽  
Author(s):  
DEIAN STEFAN ◽  
DAVID MAZIÈRES ◽  
JOHN C. MITCHELL ◽  
ALEJANDRO RUSSO
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Information Leakage ◽  
Coarse Grained ◽  
Sensitive Information ◽  
Data Confidentiality ◽  
Information Flow Control ◽  
Dynamic Information ◽  
Discretionary Access Control ◽  
Fine Grained

AbstractWe describe a language-based, dynamic information flow control (IFC) system called LIO. Our system presents a new design point for IFC, influenced by the challenge of implementing IFC as a Haskell library, as opposed to the more typical approach of modifying the language runtime system. In particular, we take a coarse-grained, floating-label approach, previously used by IFC Operating Systems, and associate a single, mutable label—thecurrent label—with all the data in a computation's context. This label is always raised to reflect the reading of sensitive information and it is used to restrict the underlying computation's effects. To preserve the flexibility of fine-grained systems, LIO also provides programmers with a means for associating an explicit label with a piece of data. Interestingly, these labeled values can be used to encapsulate the results of sensitive computations which would otherwise lead to the creeping of the current label. Unlike other language-based systems, LIO also bounds the current label with acurrent clearance, providing a form of discretionary access control that LIO programs can use to deal with covert channels. Moreover, LIO provides programmers with mutable references and exceptions. The latter, exceptions, are used in LIO to encode and recover from monitor failures, all while preserving data confidentiality and integrity—this addresses a longstanding concern that dynamic IFC is inherently prone to information leakage due to monitor failure.

scholarly journals A Better Facet of Dynamic Information Flow Control

2018 ◽  
Author(s):  
Minh Ngo ◽  
Nataliia Bielova ◽  
Cormac Flanagan ◽  
Tamara Rezk ◽  
Alejandro Russo ◽  
...  
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Information Flow Control ◽  
Dynamic Information

scholarly journals From fine- to coarse-grained dynamic information flow control and back

2019 ◽  
Vol 3 (POPL) ◽  
pp. 1-31 ◽  
Author(s):  
Marco Vassena ◽  
Alejandro Russo ◽  
Deepak Garg ◽  
Vineet Rajani ◽  
Deian Stefan
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Coarse Grained ◽  
Information Flow Control ◽  
Dynamic Information

scholarly journals IFC Inside: Retrofitting Languages with Dynamic Information Flow Control

2015 ◽  
pp. 11-31 ◽  
Author(s):  
Stefan Heule ◽  
Deian Stefan ◽  
Edward Z. Yang ◽  
John C. Mitchell ◽  
Alejandro Russo
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Information Flow Control ◽  
Dynamic Information

scholarly journals Flexible dynamic information flow control in Haskell

2012 ◽  
Vol 46 (12) ◽  
pp. 95-106 ◽  
Author(s):  
Deian Stefan ◽  
Alejandro Russo ◽  
John C. Mitchell ◽  
David Mazières
Keyword(s):  
Flow Control ◽  
Information Flow ◽  
Information Flow Control ◽  
Dynamic Information
Sign in / Sign up

Export Citation Format

Share Document