Loading...
Please wait, while we are loading the content...
Similar Documents
Limiting information leakage in event-based communication
| Content Provider | ACM Digital Library |
|---|---|
| Author | Sabelfeld, Andrei Rafnsson, Willard |
| Abstract | Event-based communication is a major source of power and flexibility for today's applications. For example, in the context of a web browser, the dynamism of user experience is driven by events: fine-grained interaction of the user with a web application triggers events reactively handled by JavaScript code. This paper explores channels for leaking sensitive information through constructs in a reactive language. We propose a general and realizable security framework for preventing information leaks in a reactive setting with such features as new handler creation and hierarchical event structures. While prior work largely takes an all-or-nothing approach to information flows due to intermediate output, our framework tightly regulates the bandwidth of such flows: at most log(n + 1) bits are allowed to be released, where n is the number of public inputs to the program. We gain flexibility from distinguishing between the security levels of message existence and content. A combination of flow-sensitive analysis and buffering output enables us to enforce security without being overly restrictive. |
| Starting Page | 1 |
| Ending Page | 16 |
| Page Count | 16 |
| File Format | |
| ISBN | 9781450308304 |
| DOI | 10.1145/2166956.2166960 |
| Language | English |
| Publisher | Association for Computing Machinery (ACM) |
| Publisher Date | 2011-06-05 |
| Publisher Place | New York |
| Access Restriction | Subscribed |
| Subject Keyword | Event model Reactive programming Information flow |
| Content Type | Text |
| Resource Type | Article |
