首页> 外文会议>Security and privacy-silver linings in the cloud >On-the-fly Inlining of Dynamic Security Monitors
【24h】

On-the-fly Inlining of Dynamic Security Monitors

机译:动态安全监视器的动态内联

获取原文
获取原文并翻译 | 示例

摘要

Language-based information-flow security considers programs that manipulate pieces of data at different sensitivity levels. Securing information flow in such programs remains an open challenge. Recently, considerable progress has been made on understanding dynamic monitoring for secure information flow. This paper presents a framework for inlining dynamic information-flow moni tors. A novel feature of our framework is the ability to perform inlining on the fly. We consider a source language that includes dynamic code evaluation of strings whose content might not be known until runtime. To secure this construct, our in lining is done on the fly, at the string evaluation time, and, just like conventional offline inlining, requires no modification of the hosting runtime environment. We present a formalization for a simple language to show that the inlined code is secure: it satisfies a noninterference property. We also discuss practical consider ations and preliminary experimental results.
机译:基于语言的信息流安全性考虑以不同的敏感度级别操纵数据的程序。在此类程序中确保信息流的安全仍然是一个挑战。最近,在了解动态监视以确保安全信息流方面已经取得了相当大的进步。本文提出了一个内联动态信息流监视器的框架。我们框架的一个新功能是能够即时执行内联。我们考虑一种源语言,其中包括对字符串的动态代码求值,这些字符串的内容可能要到运行时才能知道。为了确保这种结构的安全,我们的内联是在字符串评估时动态完成的,就像常规的离线内联一样,不需要修改托管运行时环境。我们提供一种简单语言的形式化形式,以证明内联代码是安全的:它满足非干扰属性。我们还将讨论实际考虑因素和初步实验结果。

著录项

  • 来源
  • 会议地点 Brisbane(AU);Brisbane(AU);Brisbane(AU);Brisbane(AU)
  • 作者单位

    Dept. of Computer Science and Engineering, Chalmers University of Technology 412 96 Gothenburg, Sweden, Fax: +46 31 772 3663;

    Dept. of Computer Science and Engineering, Chalmers University of Technology 412 96 Gothenburg, Sweden, Fax: +46 31 772 3663;

    Dept. of Computer Science and Engineering, Chalmers University of Technology 412 96 Gothenburg, Sweden, Fax: +46 31 772 3663;

  • 会议组织
  • 原文格式 PDF
  • 正文语种 eng
  • 中图分类 安全保密;
  • 关键词

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号