Decentralized Robustness
- 3 August 2006
- proceedings article
- Published by Institute of Electrical and Electronics Engineers (IEEE)
- Vol. 253, 242-256
- https://doi.org/10.1109/csfw.2006.11
Abstract
Robustness links confidentiality and integrity properties of a computing system and has been identified as a useful property for characterizing and enforcing security. Previous characterizations of robustness have been with respect to a single idealized attacker; this paper shows how to define robustness for systems with mutual distrust. Further, we demonstrate that the decentralized label model (DLM) can be extended to support fine-grained reasoning about robustness in such systems. The DLM is a natural choice for capturing robustness requirements because decentralized labels are explicitly expressed in terms of principals that can be used to characterize the power of attackers across both the confidentiality and integrity axes. New rules are proposed for statically checking robustness and qualified robustness using an extended DLM; the resulting type system is shown to soundly enforce robustness. Finally, sound approximations are developed for checking programs with bounded but unknown label parameters, which is useful for security-typed languages. In sum, the paper shows how to use robustness to gain assurance about secure information flow and information release in systems with complex security requirements.Keywords
This publication has 18 references indexed in Scilit:
- Dimensions and Principles of DeclassificationPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Language-Based Information ErasurePublished by Institute of Electrical and Electronics Engineers (IEEE) ,2005
- Dynamic Security Labels and Noninterference (Extended Abstract)Published by Springer Nature ,2005
- Enforcing robust declassificationPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2004
- Run-time principals in information-flow type systemsPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2004
- Language-based information-flow securityIEEE Journal on Selected Areas in Communications, 2003
- A Type System for Robust DeclassificationElectronic Notes in Theoretical Computer Science, 2003
- Protecting privacy using the decentralized label modelACM Transactions on Software Engineering and Methodology, 2000
- Information flow inference for freePublished by Association for Computing Machinery (ACM) ,2000
- JFlowPublished by Association for Computing Machinery (ACM) ,1999