Towards a practical secure concurrent language

S Muller, S Chong - Proceedings of the ACM international conference on …, 2012 - dl.acm.org
Proceedings of the ACM international conference on Object oriented …, 2012dl.acm.org
We demonstrate that a practical concurrent language can be extended in a natural way with
information security mechanisms that provably enforce strong information security
guarantees. We extend the X10 concurrent programming language with coarse-grained
information-flow control. Central to X10 concurrency abstractions is the notion of a place: a
container for data and computation. We associate a security level with each place, and
restrict each place to store only data appropriate for that security level. When places interact …
We demonstrate that a practical concurrent language can be extended in a natural way with information security mechanisms that provably enforce strong information security guarantees. We extend the X10 concurrent programming language with coarse-grained information-flow control. Central to X10 concurrency abstractions is the notion of a place: a container for data and computation. We associate a security level with each place, and restrict each place to store only data appropriate for that security level. When places interact only with other places at the same security level, then our security mechanisms impose no restrictions. When places of differing security levels interact, our information security analysis prevents potentially dangerous information flows, including information flow through covert scheduling channels. The X10 concurrency mechanisms simplify reasoning about information flow in concurrent programs. We present a static analysis that enforces a noninterference-based extensional information security condition in a calculus that captures the key aspects of X10's place abstraction and async-finish parallelism. We extend this security analysis to support many of X10's language features, and have implemented a prototype compiler for the resulting language.
ACM Digital Library
以上显示的是最相近的搜索结果。 查看全部搜索结果