Write a Blog >>
Fri 23 Jun 2017 15:50 - 16:15 at Auditorium, Vertex Building - Security Chair(s): Peter Müller

Information-flow security typing statically prevents confidential information to leak to public channels. The fundamental information flow property, known as noninterference, states that a public observer cannot learn anything from private data. As attractive as it is from a theoretical viewpoint, noninterference is impractical: real systems need to intentionally declassify some information, selectively. Among the different information flow approaches to declassification, a particularly expressive approach was proposed by Li and Zdancewic, enforcing a notion of relaxed noninterference by allowing programmers to specify declassification policies that capture the intended manner in which public information can be computed from private data. This paper shows how we can exploit the familiar notion of type abstraction to support expressive declassification policies in a simpler, yet more expressive manner. In particular, the type-based approach to declassification—which we develop in an object-oriented setting—addresses several issues and challenges with respect to prior work, including a simple notion of label ordering based on subtyping, support for recursive declassification policies, and a local, modular reasoning principle for relaxed noninterference. This work paves the way for integrating declassification policies in practical security-typed languages.

Fri 23 Jun
Times are displayed in time zone: Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna change

15:50 - 17:05: SecurityECOOP Research Papers at Auditorium, Vertex Building
Chair(s): Peter MüllerETH Zurich
15:50 - 16:15
Type Abstraction for Relaxed Noninterference
ECOOP Research Papers
Raimil CruzUniversity of Chile, Tamara RezkInria, Bernard SerpetteInria, Éric TanterUniversity of Chile
Link to publication Media Attached
16:15 - 16:40
EvilPickles: DoS attacks based on Object-Graph Engineering
ECOOP Research Papers
Jens DietrichMassey University, Kamil JezekUniversity of West Bohemia, Pilsen, CZ, Shawn RasheedMassey University, Amjed TahirMassey University, Alex PotaninVictoria University of Wellington
Link to publication Pre-print Media Attached
16:40 - 17:05
A Capability-Based Module System for Authority Control
ECOOP Research Papers
Darya MelicherCarnegie Mellon University, Yangqingwei ShiPeking University, Alex PotaninVictoria University of Wellington, Jonathan AldrichCarnegie Mellon University
Link to publication