Information Flow Certification Using an Intermediate Code Program Representation
- 1 November 1981
- journal article
- Published by Institute of Electrical and Electronics Engineers (IEEE) in IEEE Transactions on Software Engineering
- Vol. SE-7 (6) , 594-607
- https://doi.org/10.1109/tse.1981.226476
Abstract
This paper describes a compile-time information flow control (IFC) mechanism that certifies secure information flow within the collection of objects accessed by a program. The IFC mechanism is based on the lattice model and certification mechanism of Denning, who proposes the use of the mechanism during the analysis phase of compilation. However, IFC is placed after semantic analysis and before code optimization by ufilizing an intermediate code representation. This reduces the complexity of IFC and allows a degree of language independence. An implentation has been developed for Pascal.Keywords
This publication has 7 references indexed in Scilit:
- Webcat: the design and implementation of the Web-based crime analysis toolkitPublished by Institute of Electrical and Electronics Engineers (IEEE) ,2004
- Compiler design for efficient code generation and program optimizationACM SIGPLAN Notices, 1979
- Certification of programs for secure information flowCommunications of the ACM, 1977
- A lattice model of secure information flowCommunications of the ACM, 1976
- The protection of information in computer systemsProceedings of the IEEE, 1975
- A high security log-in procedureCommunications of the ACM, 1974
- A note on the confinement problemCommunications of the ACM, 1973