Type-based information flow analysis for bytecode languages with variable object field policies

Francisco Bavera, Eduardo Bonelli
2008 Proceedings of the 2008 ACM symposium on Applied computing - SAC '08  
Static, type-based information flow analysis techniques targeted at Java and JVM-like code typically assume a global security policy on object fields: all fields are assigned a fixed security level. In essence they are treated as standard variables. However different objects may be created under varying security contexts, particularly for widely used classes such as wrapper or collection classes. This entails an important loss in precision of the analysis. We present a flowsensitive type system
more » ... for statically detecting illegal flows of information in a JVM-like language that allows the level of a field to vary at different object creation points. Also, we prove a noninterference result for this language.
doi:10.1145/1363686.1363776 dblp:conf/sac/BaveraB08 fatcat:gtojrwcfxbb7pppfzo3foiq7he