A certified lightweight non-interference java bytecode verifier

DMCA

A certified lightweight non-interference java bytecode verifier (2007)

Cached

Download Links

Other Repositories/Bibliography

DBLP

by Gilles Barthe , David Pichardie , Tamara Rezk

Venue:	EUROPEAN SYMPOSIUM ON PROGRAMMING, LECTURE NOTES IN COMPUTER SCIENCE
Citations:	46 - 7 self

BibTeX

@INPROCEEDINGS{Barthe07acertified,
    author = {Gilles Barthe and David Pichardie and Tamara Rezk},
    title = {A certified lightweight non-interference java bytecode verifier},
    booktitle = {EUROPEAN SYMPOSIUM ON PROGRAMMING, LECTURE NOTES IN COMPUTER SCIENCE},
    year = {2007},
    pages = {125--140},
    publisher = {Springer}
}

OpenURL

Abstract

Non-interference is a semantical condition on programs that guarantees the absence of illicit information flow throughout their execution, and that can be enforced by appropriate information flow type systems. Much of previous work on type systems for non-interference has focused on calculi or high-level programming languages, and existing type systems for low-level languages typically omit objects, exceptions, and method calls, and/or do not prove formally the soundness of the type system. We define an information flow type system for a sequential JVM-like language that includes classes, objects, arrays, exceptions and method calls, and prove that it guarantees non-interference. For increased confidence, we have formalized the proof in the proof assistant Coq; an additional benefit of the formalization is that we have extracted from our proof a certified lightweight bytecode verifier for information flow. Our work provides, to our best knowledge, the first sound and implemented information flow type system for such an expressive fragment of the JVM.

Keyphrases

type system information flow type system method call first sound additional benefit semantical condition proof assistant coq expressive fragment low-level language information flow increased confidence appropriate information flow type system previous work sequential jvm-like language certified lightweight bytecode verifier high-level programming language illicit information flow

DMCA