See this document in CiteSeerX!

A New Approach to Mobile Code Security (1999)  (Make Corrections)  (21 citations)
Dan Seth Wallach



  Home/Search   Context   Related

 
View or download:
princeton.edu/sip/...llachthesis.ps.gz
Cached:  PS.gz  PS  PDF   Image  Update  Help

From:  princeton.edu/s...chdissertation (more)
(Enter author homepages)

Rate this article: (best)
  Comment on this article  
(Enter summary)

Abstract: This dissertation presents a novel security architecture called security-passing style and motivates its application to security issues that arise in mobile code systems such as Java. Security-passing style, and its predecessor, stack inspection, allow the system to capture the complex security relationships that occur when trusted and untrusted code are run together and interact closely. (Update)

Context of citations to this paper:   More

.... more standard terms by translating # sec into a standard lambda calculus by generalising Wallach s security pasing programming style [Wal99] to higher order functions. Bartoletti, Degano and Ferrari [BDF01] develop a data flow analysis for control flow graphs that determines...

Cited by:   More
Games for Controls - Chatterjee, Jagadeesan, Pitcher (2006)   (Correct)
Stack Inspection and Secure Program Transformations - Bartoletti, Degano, Ferrari   (Correct)
Project Description - We Propose To   (Correct)

Similar documents (at the sentence level):
7.2%:   Understanding Java Stack Inspection - Wallach, Felten (1998)   (Correct)
5.4%:   Extensible Security Architectures for Java - Wallach, Balfanz, Dean, Felten (1997)   (Correct)

Active bibliography (related documents):   More   All
0.9:   Java Security: Web Browsers and Beyond - Dean, Felten, Wallach, Balfanz (1998)   (Correct)
0.6:   Mostly-Static Decentralized Information Flow Control - Myers (1999)   (Correct)
0.6:   Static support for capability-based programming in Java - Saraswat, Jagadeesan   (Correct)

Similar documents based on text:   More   All
0.1:   Hierarchical Modularity And Intermodule Optimization - Blume (1997)   (Correct)
0.1:   Logic-Based Switching Algorithms in Control - Hespanha (1998)   (Correct)
0.1:   Characterizing and Removing Branch Mispredictions - Skadron (1999)   (Correct)

Related documents from co-citation:   More   All
10:   Understanding Java Stack Inspection - Wallach, Felten - 1998
7:   Going Beyond the Sandbox: An Overview of the New Security Architecture in the Ja.. - GONG, MUELLER et al. - 1997
6:   Security properties of typed applets - Leroy, Rouaix

BibTeX entry:   (Update)

Dan S. Wallach. A New Approach to Mobile Code Security. PhD Thesis, Princeton University. January 1999. http://citeseer.ist.psu.edu/wallach99new.html   More

@phdthesis{ wallach99new,
    author = "Dan S. Wallach",
    title = "A New Approach to Mobile Code Security",
    address = "Department of Computer Science",
    year = "1999",
    url = "citeseer.ist.psu.edu/wallach99new.html" }
Citations (may not include all citations):
704   Applied Cryptography (context) - Schneier - 1996
384   The Definition of Standard ML (context) - Milner, Tofte et al. - 1990
380   The Java Language Specification (context) - Gosling, Joy et al. - 1996
339   Efficient software-based fault isolation - Wahbe, Lucco et al. - 1993
265   Secure computer system: Unified exposition and Multics inter.. (context) - Bell, LaPadula - 1976
264   Safe kernel extensions without runtime checking - Necula, Lee - 1996
261   Modern Operating Systems (context) - Tanenbaum - 1992
253   Authentication in distributed systems: Theory and practice - Lampson, Abadi et al. - 1992
207   CORBA Fundamentals and Programming (context) - Siegel - 1996
194   The protection of information in computer systems (context) - Saltzer, Schroeder - 1975
190   Optimization of object-oriented programs using static class .. - Dean, Grove et al. - 1995
184   Automated analysis of cryptographic protocols using Mur - Mitchell, Mitchell et al. - 1997
175   Dealing with disaster: Surviving misbehaved kernel extension.. - Seltzer, Endo et al. - 1996
175   A secure environment for untrusted helper applications: Conf.. - Goldberg, Wagner et al. - 1996
173   A comparison of commercial and military computer security po.. (context) - Clark, Wilson - 1987
169   A type system for Java bytecode subroutines - Stata, Abadi - 1998
168   Making paths explicit in the Scout operating system - Mosberger, Peterson - 1996
162   Programming in Modula (context) - Wirth - 1983
162   A calculus for access control in distributed systems - Abadi, Burrows et al. - 1993
155   Secure computer systems: Mathematical foundations (context) - Bell, LaPadula - 1973
153   A note on the confinement problem - Lampson - 1973
136   Java security: From HotJava to Netscape and beyond - Dean, Felten et al. - 1996
118   Extensible security architectures for Java - Wallach, Balfanz et al. - 1997
116   Rabbit: a compiler for Scheme (context) - Steele - 1978
116   Sharing and protection in a single address space operating s.. - Chase, Levy et al. - 1994
114   Capability-Based Computer Systems (context) - Levy - 1984
111   Firewalls and Internet Security: Repelling the Wily Hacker (context) - Cheswick, Bellovin - 1994
101   Authentication in the Taos operating system - Wobber, Abadi et al. - 1994
101   The Multics System: An Examination of its Structure (context) - Organick - 1972
101   Implementing multiple protection domains in Java - Hawblitzel, Chang et al. - 1998
92   Microkernels meet recursive virtual machines - Ford, Hibler et al. - 1996
90   Email with a mind of its own: The Safe-Tcl language for enab.. (context) - Borenstein - 1994
87   Plan 9 from Bell Labs - Pike, Presotto et al. - 1990
85   Formal models for computer security (context) - Landwehr - 1981
83   ACM Transactions on Computer Systems (context) - Burrows, Abadi et al. - 1990
81   HYDRA: The kernel of a multiprocessor operating system (context) - Wulf, Cohen et al. - 1974
78   and performance in the SPIN operating system (context) - Bershad, Savage et al. - 1995
72   ACM Transactions on Programming Languages and Systems (context) - Hennessy, of - 1982
70   Using sparse capabilities in a distributed operating system - Tanenbaum, Mullender et al. - 1986
68   Computer security technology planning study (context) - Anderson - 1972
68   Covariance and contravariance: Conflict without a cause - Castagna - 1995
66   Java Security: Hostile Applets (context) - McGraw, Felten - 1997
65   The Java Virtual Machine Specification (context) - Lindholm, Yellin - 1996
64   Automatic program transformation with JOIE - Cohen, Chase et al. - 1998
63   Capability-based addressing (context) - Fabry - 1974
60   The security of static typing with dynamic linking - Dean - 1997
59   Is the Java type system sound - Drossopoulou, Eisenbach - 1997
57   Fast interprocedural class analysis - DeFouw, Grove et al. - 1998
56   Java is type safe --- probably - Drossopoulou, Eisenbach - 1997
51   Simple and effective link-time optimization of Modula-3 prog.. - Fernandez - 1995
51   Understanding Java stack inspection - Wallach, Felten - 1998
50   The Design and Evolution of C (context) - Stroustrup - 1994
50   An Analysis of Security Incidents On The Internet (context) - Howard - 1997
50   The Safe-Tcl security model - Levy, Demailly et al. - 1998
48   A secure identity-based capability system - Gong - 1989
48   Why aren't operating systems getting faster as fast as hardw.. - Ousterhout - 1990
47   JavaScript: The Definitive Guide (context) - Flanagan - 1997
47   Simple and effective analysis of statically typed object-ori.. - Diwan, Eliot et al. - 1996
46   Architecture validation for processors - Ho, Yang et al. - 1995
46   Java operating systems: Design and implementation - Back, Tullman et al. - 1998
43   Java Virtual Machine (context) - Meyer, Downing - 1997
40   Dynamic class loading in the java virtual machine (context) - Liang, Bracha - 1998
39   Implementing protection domains in the Java Development Kit - Gong, Schemers - 1998
38   What is Java binary compatibility - Drossoppoulou, Wragg et al. - 1998
37   Practical domain and type enforcement for UNIX (context) - Badger, Sterne et al. - 1995
37   JRes: A resource accounting interface for Java - Czajkowski, von Eicken - 1998
35   Lightweight shared objects in a 64-bit operating system - Chase, Levy et al. - 1992
35   Department of Defense Trusted Computer System Evaluation Cri.. (context) - Security, Fort et al. - 1985
34   Dynamic binding for an extensible system (context) - Pardyak, Bershad - 1996
32   Verification of flash cache coherence protocol by aggregatio.. - Park, Dill - 1996
32   Debugging Standard ML without reverse engineering - Tolmach, Appel - 1990
27   The Telescript Language Reference - Magic, Mountain et al. - 1995
26   An introduction to the architecture of the VINO kernel (context) - Seltzer, Endo et al. - 1994
25   A hardware architecture for implementing protection rings (context) - Schroeder, Saltzer - 1972
25   Design and verification of secure systems - Rushby - 1981
24   Secure execution of Java applets using a remote playground - Malkhi, Reiter et al. - 1998
24   An augmented capability architecture to support lattice secu.. (context) - Karger, Herbert - 1984
23   A provably secure operating system: The system (context) - Neumann, Boyer et al. - 1980
23   Java security: Web browsers and beyond - Dean, Felten et al. - 1997
22   The Chinese wall security policy (context) - Brewer, Nash - 1989
22   Experience with secure multi-processing in Java - Balfanz, Gong - 1998
22   On access checking in capability-based systems - Kain, Landwehr - 1987
22   With microscope and tweezers: An analysis of the Internet vi.. - Eichin, Rochlis - 1989
20   Improving the security of your site by breaking into it (context) - Farmer, Venema - 1993
20   VLISP: A verified implementation of Scheme - Guttman, Wand - 1995
20   The Java HotSpot Virtual Machine Architecture (context) - Griswold - 1998
20   Role-based access control: A multi-dimensional view - Sandhu, Coyne et al. - 1994
18   Blocking Java applets at the firewall - Jr, Rajagopalan et al. - 1997
18   Security kernel design and implementation: An introduction (context) - Ames, Morrie et al. - 1987
17   Integrating security in CORBA based object architectures (context) - Deng, Bhonsle et al. - 1995
16   The Kerberos network authentication service (context) - Kohl, Neuman - 1993
14   Software: Practice and Experience (context) - Birrell, Nelson et al. - 1995
13   Distributed virtual machines: A system architecture for netw.. - Sirer, Grimm et al. - 1998
12   The interaction of architecture and operating system design - Anderson, Levy et al. - 1991
11   Secure network objects - van Doorn, Abadi et al. - 1996
11   Phantom: An interpreted language for distributed programming - Courtney - 1995
10   Proposal for Authenticating Code Via the Internet (context) - Corporation, Washington - 1996
9   ACM Operating Systems Review (context) - Hardy - 1985
9   The Gateway Security Model in the Java Electronic Commerce F.. - Goldstein - 1996
9   ACM Operating Systems Review (context) - Hardy, deputy - 1988
6   Microsoft Security Management Architecture White Paper (context) - Corporation, Washington - 1997
6   Common Secure Interoperability (context) - Group - 1996
6   DCE Security Programming (context) - Hu - 1995
6   Hostile applets home page (context) - LaDue - 1996
6   Kimera: A Java system architecture (context) - Sirer - 1997
5   Personal communication (context) - Mueller - 1996
5   The Digitivity Cage (context) - Corp - 1997
5   Kaffe OpenVM (context) - Technologies, Berkeley - 1998
4   Trust-Based Security for Java (context) - Corporation, Washington - 1997
3   Java and security (context) - Roskind - 1996
3   Evolving the Security Model For Java From Navigator (context) - Roskind - 1996
3   Frequently Asked Questions - Applet Security (context) - Microsystems, California - 1995
3   BulletTrain Java Compiler (context) - LLC - 1998
3   The Computation Center and Research Laboratory of Electronic.. (context) - McCarthy, Abrahams et al. - 1962
3   The Electric Communities Trust Manager and Its Use to Secure.. (context) - Communities, California - 1996
3   Introduction to the Capabilities Classes (context) - Corporation, View - 1997
3   Personal communication (context) - Zadeck - 1998
2   Malicious data and computer security (context) - Sibert - 1996
2   Back Orifice (context) - the, Cow - 1998
2   System/38 addressing and authorization (context) - Berstis, Truxal et al. - 1980
2   A tree-based alternative to Java byte-codes (context) - Franz, Kistler - 1996
2   Information protection and the control of sharing in the Mul.. (context) - Saltzer - 1974
1   computer oracle and password system (context) - Farmer - 1993
1   extensible Java security using digital signatures (context) - Wallach, Roskind et al. - 1996
1   orginternet draftdraft ietf tl protocol (context) - Dierks, The et al. - 1997
1   Internet Scanner User Guide (context) - Systems, Georgia - 1998
1   JAR Documentation (context) - Microsystems, View - 1996
1   comlibrary documentationsignedobjjarfile (context) - Communications, View et al. - 1996
1   Recognizing and recovering from Rootkit attacks (context) - O'Brien - 1996
1   usinternet draft draft freier ssl version (context) - Freier, Karlton et al. - 1996
1   Inferno: la Commedia Interattiva (context) - Research, Bell et al. - 1997
1   Nested Java processes: OS structure for mobile code (context) - Tullman, Lepreau - 1998



The graph only includes citing articles where the year of publication is known.


Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC