On-the-fly inlining of dynamic dependency monitors for secure information flow

Luciano Bello, Eduardo Bonelli

Research output: Chapter in Book/Report/Conference proceedingConference contributionpeer-review

Abstract

Information flow analysis (IFA) in the setting of programming languages is steadily veering towards the adoption of dynamic techniques. This is particularly attractive for scripting languages for web applications programming. A common manifestation of dynamic techniques is that of run-time monitors, which should block program execution in the presence of an insecure run. Significant efforts are still required before practical, scalable monitors for secure IFA of industrial scale languages such as JavaScript can be achieved. Such monitors ideally should compensate for the absence of the traces they do not track, should not require modifications of the VM and should provide a fair compromise between security and usability among other things. This paper discusses on-the-fly inlining of monitors that track dependencies as a prospective candidate.

Original languageEnglish
Title of host publicationFormal Aspects of Security and Trust - 8th International Workshop, FAST 2011, Revised Selected Papers
Pages55-69
Number of pages15
DOIs
StatePublished - 2012
Event8th International Workshop on Formal Aspects of Security and Trust, FAST 2011 - Leuven, Belgium
Duration: Sep 12 2011Sep 14 2011

Publication series

NameLecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
Volume7140 LNCS

Conference

Conference8th International Workshop on Formal Aspects of Security and Trust, FAST 2011
Country/TerritoryBelgium
CityLeuven
Period9/12/119/14/11

ASJC Scopus subject areas

  • Theoretical Computer Science
  • General Computer Science

Fingerprint

Dive into the research topics of 'On-the-fly inlining of dynamic dependency monitors for secure information flow'. Together they form a unique fingerprint.

Cite this