loading...
Encoding Information Flow in Haskell
Venice, Italy July 05-July 07
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSFW.2006.1319th IEEE Computer Security Foundatio ...
 This Article 
 
Buy PURCHASE ARTICLE: $19
PDF
HTML
Buy IEEE Xplore Subscribers
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
ASCII Text
x 
 
Peng Li, Steve Zdancewic, "Encoding Information Flow in Haskell," Computer Security Foundations Workshop, IEEE, pp. 16, 19th IEEE Computer Security Foundations Workshop (CSFW'06), 2006.
 
 
BibTex
x
 
@article{ 10.1109/CSFW.2006.13,
author = {Peng Li and Steve Zdancewic},
title = {Encoding Information Flow in Haskell},
journal ={Computer Security Foundations Workshop, IEEE},
volume = {0},
year = {2006},
issn = {1063-6900},
pages = {16},
doi = {http://doi.ieeecomputersociety.org/10.1109/CSFW.2006.13},
publisher = {IEEE Computer Society},
address = {Los Alamitos, CA, USA},
}
 
 
RefWorks Procite/RefMan/Endnote
x 
 
TY - CONF
JO - Computer Security Foundations Workshop, IEEE
TI - Encoding Information Flow in Haskell
SN - 1063-6900
SP
EP
A1 - Peng Li,
A1 - Steve Zdancewic,
PY - 2006
KW - null
VL - 0
JA - Computer Security Foundations Workshop, IEEE
ER -
 
Peng Li, University of Pennsylvania, USA
Steve Zdancewic, University of Pennsylvania, USA
This paper presents an embedded security sublanguage for enforcing information-flow policies in the standard Haskell programming language. The sublanguage provides useful information-flow control mechanisms including dynamic security lattices, run-time code privileges and declassification, without modifying the base language. This design avoids the redundant work of producing new languages, lowers the threshold for adopting security-typed languages, and also provides great flexibility and modularity for using security-policy frameworks.

The embedded security sublanguage is designed using a standard combinator interface called arrows. Computations constructed in the sublanguage have static and explicit control-flow components, making it possible to implement information-flow control using static-analysis techniques at run time, while providing strong security guarantees. This paper presents a concrete Haskell implementation and an example application demonstrating the proposed techniques.

Citation:
Peng Li, Steve Zdancewic, "Encoding Information Flow in Haskell," csfw, pp.16, 19th IEEE Computer Security Foundations Workshop (CSFW'06), 2006
Usage of this product signifies your acceptance of the Terms of Use.