A static type system for JVM access control

Higuchi, Tomoyuki; Ohori, Atsushi

doi:10.1145/1180475.1180479

Cited by 11 publications

(2 citation statements)

References 30 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Basically, the rules have a similar format as the rules used in type-checking bytecode programs [14,15]. The difference is that in the type-checking system, the result is the types of the bytecode programs, while in our system, the result is a behavioral model.…”

Section: Model Construction and Proofmentioning

confidence: 99%

Policy-Based Attestation of Service Behavior for Establishing Rigorous Trust

Liu

Zic

2010

On the Move to Meaningful Internet Systems: OTM 2010

View full text Add to dashboard Cite

Abstract.A service is rigorously trusted if it can provide firm evidences to its users about its behavior. The evidences ensure that the service really follows its claimed behavior to process the requests and sensitive input data from users. In this paper, we propose a framework, which can attest the behavior of web services according to the trust policies specified by users. Different users may concern different aspects of service behavior. By using policies, this framework allows user-specific behavior attestation. In addition, this framework also protects service providers. When a user sends a service request, the framework needs the user to show that he has agreed on the service behavior. A case study is used to describe the critical processing steps of the framework to deliver rigorously trusted services.

show abstract

Section: Model Construction and Proofmentioning

confidence: 99%

Policy-Based Attestation of Service Behavior for Establishing Rigorous Trust

Liu

Zic

2010

On the Move to Meaningful Internet Systems: OTM 2010

View full text Add to dashboard Cite

show abstract

“…The method is applicable to stack inspection as well as other properties. Building up on earlier work by F. Pottier, C. Skalka and S. Smith [82], T. Higushi and A. Ohori [50] propose a static type system for access control in the JVM, and develop a sound inference algorithm to verify statically that programs respect the access control policy specified by the type system.…”

Section: Enhanced Type Systems and Static Analysesmentioning

confidence: 99%

Formal Methods for Smartcard Security

Barthe

Dufay

2005

Foundations of Security Analysis and Design III

View full text Add to dashboard Cite

Abstract. Smartcards are trusted personal devices designed to store and process confidential data, and to act as secure tokens for providing access to applications and services. Smartcards are widely deployed and their usage spans over several application domains including banking, telecommunications, and identity.Open platform smartcards are new generation trusted personal devices with increased flexibility. Such devices, which benefit of increased connectivity and increased interoperability, can host several applets and allow new applets to be loaded post-issuance. Such an increased flexibility raises concerns about the possibility of logical attacks that could affect a very large number of devices, and requires the development of techniques and tools that can be used to increase the reliability of platforms and applications for trusted personal devices. The objective of this chapter is to describe some applications of formal methods to increase the reliability of smartcards and trusted personal devices.

show abstract