Sciweavers

Share
SP
2008
IEEE

Fable: A Language for Enforcing User-defined Security Policies

8 years 3 months ago
Fable: A Language for Enforcing User-defined Security Policies
This paper presents FABLE, a core formalism for a programming language in which programmers may specify security policies and reason that these policies are properly enforced. In FABLE, security policies can be expressed by associating security labels with the data or actions they protect. Programmers define the semantics of labels in a separate part of the program called the enforcement policy. FABLE prevents a policy from being circumvented by allowing labeled terms to be manipulated only within the enforcement policy; application code must treat labeled values ly. Together, these features facilitate straightforward proofs that programs implementing a particular policy achieve their high-level security goals. FABLE is flexible enough to implement a wide variety of security policies, including access control, information flow, provenance, and security automata. We have implemented FABLE as part of the LINKS web programming language; we call the resulting language SELINKS. We report o...
Nikhil Swamy, Brian J. Corcoran, Michael Hicks
Added 15 Dec 2010
Updated 15 Dec 2010
Type Journal
Year 2008
Where SP
Authors Nikhil Swamy, Brian J. Corcoran, Michael Hicks
Comments (0)
books