Sökning: onr:"swepub:oai:research.chalmers.se:5e632d80-d335-4f60-9a45-22159da2eb43" >
Explicit Secrecy: A...
Explicit Secrecy: A Policy for Taint Tracking
-
- Schoepe, Daniel, 1989 (författare)
- Chalmers tekniska högskola,Chalmers University of Technology
-
- Balliu, Musard, 1985 (författare)
- Chalmers tekniska högskola,Chalmers University of Technology
-
Pierce, B. C. (författare)
-
visa fler...
-
- Sabelfeld, Andrei, 1974 (författare)
- Chalmers tekniska högskola,Chalmers University of Technology
-
visa färre...
-
(creator_code:org_t)
- ISBN 9781509017522
- 2016
- 2016
- Engelska.
-
Ingår i: 1st IEEE European Symposium on Security and Privacy (Euro S&P), Saarbruecken, Germany, Mar 21-24, 2016. - 9781509017522 ; , s. 15-30
- Relaterad länk:
-
http://dx.doi.org/10...
-
visa fler...
-
https://doi.org/10.1...
-
https://research.cha...
-
visa färre...
Abstract
Ämnesord
Stäng
- Taint tracking is a popular security mechanism for tracking data-flow dependencies, both in high-level languages and at the machine code level. But despite the many taint trackers in practical use, the question of what, exactly, tainting means-what security policy it embodies-remains largely unexplored. We propose explicit secrecy, a generic framework capturing the essence of explicit flows, i.e., the data flows tracked by tainting. The framework is semantic, generalizing previous syntactic approaches to formulating soundness criteria of tainting. We demonstrate the usefulness of the framework by instantiating it with both a simple high-level imperative language and an idealized RISC machine. To further understanding of what is achieved by taint tracking tools, both dynamic and static, we obtain soundness results with respect to explicit secrecy for the tainting engine cores of a collection of popular dynamic and static taint trackers.
Ämnesord
- NATURVETENSKAP -- Geovetenskap och miljövetenskap -- Geofysik (hsv//swe)
- NATURAL SCIENCES -- Earth and Related Environmental Sciences -- Geophysics (hsv//eng)
Nyckelord
- Theory & Methods
- Engineering
- Electrical & Electronic
- Computer Science
Publikations- och innehållstyp
- kon (ämneskategori)
- ref (ämneskategori)
Hitta via bibliotek
Till lärosätets databas