loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
16th IEEE Computer Security Foundations Workshop (CSFW'03)
Observational Determinism for Concurrent Program Security
Pacific Grove, California
June 30-July 02
ISBN: 0-7695-1927-X
Steve Zdancewic, University of Pennsylvania
Andrew C. Myers, Cornell University
Noninterference is a property of sequential programs that is useful for expressing security policies for data confidentiality and integrity. However, extending noninterference to concurrent programs has proved problematic. In this paper we present a relatively expressive secure concurrent language. This language, based on existing concurrent calculi, provides first-class channels, higher-order functions, and an unbounded number of threads. Well-typed programs obey a generalization of noninterference that ensures immunity to internal timing attacks and to attacks that exploit information about the thread scheduler. Elimination of these refinement attacks is possible because the enforced security property extends noninterference with observational determinism. Although the security property is strong, it also avoids some of the restrictiveness imposed on previous security-typed concurrent languages.
Citation:
Steve Zdancewic, Andrew C. Myers, "Observational Determinism for Concurrent Program Security," csfw, pp.29, 16th IEEE Computer Security Foundations Workshop (CSFW'03), 2003
Usage of this product signifies your acceptance of the Terms of Use.