Fetching the paper…

Reading the bibliography…

2014

Jif: Language-based Information-flow Security in Java

Pullicino, Kyle

Original
PDF
Post on X

Understand

In this report, we examine Jif, a Java extension which augments the language with features related to security.

Jif adds support for security labels to Java's type system such that the developer can specify confidentiality and integrity policies to the various variables used in their program.
We list the main features of Jif and discuss the information flow problem that Jif helps to solve.
We see how the information flow problem occurs in real-world systems by looking at two examples: Civitas, a ballot/voting system where voters do not necessarily trust voting agents, and SIF, a web application container implemented using Jif.

Jif: Language-based Information-flow Security in Java · Around

Built on

A lattice model of secure information flow
Dorothy E. Denning · 1976
Earlier work this paper cites.
Certification of programs for secure information flow
Dorothy E. Denning and Peter J. Denning · 1977
Earlier work this paper cites.
Language-based information-flow security
Original
A. Sabelfeld and A.C. Myers · 2003
Earlier work this paper cites.

Similar

SIF: Enforcing confidentiality and integrity in web applications
Stephen Chong, K. Vikram, and Andrew C. Myers · 2007
Cited alongside, same era.
Civitas: Toward a secure voting system
M.R. Clarkson, Stephen Chong, and Andrew C. Myers · 2008
Cited alongside, same era.
JIF Reference Manual
Stephen Chong, Andrew C. Myers, K. Vikram, and Lantian Zheng · 2009
Cited alongside, same era.

Then

Information-flow security for a core of JavaScript
D. Hedin and A. Sabelfeld · 2012
Later among the works it cites.
Secure multi-execution of web scripts: Theory and practice
Willem De Groef, Dominique Devriese, Nick Nikiforakis, and Frank Piessens · 2014
Closest in time.

Beyond the bibliography

alphaXiv searches the wider corpus for related work and actual follow-ups.

Open on alphaXiv

alphaXiv is searching for related work…