JFlow

Myers, Andrew C.

doi:10.1145/292540.292561

Cited by 730 publications

(35 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…When Alice wants to protect a value, she creates a facet annotated with her label and two branches. e positive (le ) branch represents the value as it should appear to her, and the negative (right) to everyone else: 16 ( define alice-board 17…”

Section: Overview Of Faceted Executionmentioning

confidence: 99%

Racets: Faceted Execution in Racket

Micinski¹,

Wang²,

Gilray³

2018

EasyChair Preprints

View full text Add to dashboard Cite

Faceted Execution is a linguistic paradigm for dynamic information-ow control. Under faceted execution, secure program data is represented by faceted values: decision trees that encode how the data should appear to its owner (represented by a label) versus everyone else. When labels are allowed to be rst-class (i.e., predicates that decide at runtime which data to reveal), faceted execution enables policy-agnostic programming: a programming style that allows privacy policies for data to be enforced independently of code that computes on that data.To date, implementations of faceted execution are relatively heavyweight: requiring either changing the language runtime or the application code (e.g., by using monads). Following Racket's languages-as-libraries approach, we present Racets: an implementation of faceted execution as a library of macros. Given Racket's highly-expressive macro system, our implementation follows relatively directly from the semantics of faceted execution. To demonstrate how R can be used for policy-agnostic programming, we use it to build a web-based game of Ba leship. Our implementation sheds light on several interesting issues in interacting with code wri en without faceted execution. Our R implementation is open source, under development, and available online.

show abstract

Section: Overview Of Faceted Executionmentioning

confidence: 99%

Racets: Faceted Execution in Racket

Micinski¹,

Wang²,

Gilray³

2018

EasyChair Preprints

View full text Add to dashboard Cite

show abstract

“…However, Algorithm 1 informs roles in the organizations -( Using roles in trusted or authorized organizations is the basic concept of information flow control to prevent technique leakage. However, the join operation of an information flow control model [24] is not mentioned (the join operation adjusts the subject that can access an object after an information flow). In fact, the join operation in KPSEE is achieved by the statement -…”

Section: Featuresmentioning

confidence: 99%

A Knowledge-based PSEE with the Ability of Project Monitoring

Chien¹,

Wei²

2014

IJIEEB

View full text Add to dashboard Cite

Abstract-Process-centered software engineering environments (PSEEs) facilitate managing software projects. According to the change of enactment environments and the increment of software development complexity, PSEE features should be enhanced. We designed a knowledge-based PSEE named KPSEE. It offers the features: (1) maximizing the degree of process parallelism, (2) enhancing process flexibility, (3) managing product consistency, (4) integrating PSEEs, (5) keeping pace with significant process change, (6) preventing technique leakage, and (7) offering project monitoring ability.

show abstract

“…To give the user policy control, it is necessary to label data items with an access control policy. We propose using labels similar to those from programming language information flow tracking [15]. As tables are manipulated by relational algebra operations, the label from each cell taints the label of any result which depends on that cell.…”

Section: Security Architecturementioning

confidence: 99%

Privacy enforcement for distributed healthcare queries

Siegenthaler

Birman

2009

Proceedings of the 3d International ICST Conference on Pervasive Computing Technologies for Healthcare

View full text Add to dashboard Cite

Abstract-In the healthcare industry and others, sensitive private information must be stored and shared between various organizations in the course of running their business. We have developed an architecture in which distributed data can be queried as if it resided in a single centralized database, while revealing minimal information beyond the answer to the query. In this paper we review the architecture and show how queries can be filtered to enforce user-specified privacy policies. We present a system for tracking information flow that is flexible enough to permit revealing sensitive data to those who have a need to know, while limiting the amount of useful information that can be obtained by a less-than-honest participant.

show abstract

JFlow

Cited by 730 publications

References 18 publications

Racets: Faceted Execution in Racket

Racets: Faceted Execution in Racket

A Knowledge-based PSEE with the Ability of Project Monitoring

Privacy enforcement for distributed healthcare queries

Contact Info

Product

Resources

About