DMCA
Tight Enforcement of Information-Release Policies for Dynamic Languages
Cached
Download Links
| Citations: | 51 - 21 self |
BibTeX
@MISC{Askarov_tightenforcement,
author = {Aslan Askarov and Andrei Sabelfeld},
title = {Tight Enforcement of Information-Release Policies for Dynamic Languages},
year = {}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
This paper studies the problem of securing information release in dynamic languages. We propose (i) an intuitive framework for information-release policies expressing both what can be released by an application and where in the code this release may take place and (ii) tight and modular enforcement by hybrid mechanisms that combine monitoring with on-the-fly static analysis for a language with dynamic code evaluation and communication primitives. The policy framework and enforcement mechanisms support both terminationsensitive and insensitive security policies. 1.
Keyphrases
information-release policy dynamic language tight enforcement dynamic code evaluation communication primitive modular enforcement insensitive security policy intuitive framework paper study enforcement mechanism information release hybrid mechanism policy framework on-the-fly static analysis
