A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2017; you can also visit the original URL.
The file type is application/pdf
.
Type-based information flow analysis for bytecode languages with variable object field policies
2008
Proceedings of the 2008 ACM symposium on Applied computing - SAC '08
Static, type-based information flow analysis techniques targeted at Java and JVM-like code typically assume a global security policy on object fields: all fields are assigned a fixed security level. In essence they are treated as standard variables. However different objects may be created under varying security contexts, particularly for widely used classes such as wrapper or collection classes. This entails an important loss in precision of the analysis. We present a flowsensitive type system
doi:10.1145/1363686.1363776
dblp:conf/sac/BaveraB08
fatcat:gtojrwcfxbb7pppfzo3foiq7he