NDLI: Secure composition of insecure components

Content Provider	IEEE Xplore Digital Library
Author	Sewell, P. Vitek, J.
Copyright Year	1999
Description	Author affiliation: Comput. Lab., Cambridge Univ., UK (Sewell, P.)
Abstract	Software systems are becoming heterogeneous: instead of a small number of large programs from well-established sources, a user's desktop may now consist of many smaller components that interact in intricate ways. Some components will be down-loaded from the network from sources that are only partially trusted. A user would like to know that a number of security properties hold, e.g., that personal data is not leaked to the net, but it is typically infeasible to verify that such components are well behaved. Instead they must be executed in a secure environment, or wrapper, that provides fine grain control of the allowable interactions between them and between components and other system resources. We study such wrappers, focusing on how they can be expressed in a way that enables their security properties to be stated and proved rigorously. We introduce a model programming language, the box-/spl pi/ calculus that supports composition of software components and the enforcement of security policies. Several example wrappers are expressed using the calculus: we explore the delicate security properties they guarantee.
Starting Page	136
Ending Page	150
File Size	273035
Page Count	15
File Format	PDF
ISBN	0769502016
ISSN	10636900
DOI	10.1109/CSFW.1999.779769
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	1999-06-30
Publisher Place	Italy
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Security Read only memory Application software Protection Java Laboratories Computer languages Software systems Assembly Information processing
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Protection reconfiguration for reusable software

Secure execution of mobile programs

Seamless Secure Development of Systems: From Modeling to Enforcement of Access Control Policies

From Languages to Systems: Understanding Practical Application Development in Security-typed Languages

Security characterisation of software components and their composition

Mobile agents for secure electronic commerce transactions with privacy protection of the customers

Introduction to "building reliable secure computing systems out of unreliable insecure components"

A prototype secure workflow server

Security mechanisms for the MAP agent system

Secure composition of insecure components

Similar Documents

Protection reconfiguration for reusable software

Secure execution of mobile programs

Seamless Secure Development of Systems: From Modeling to Enforcement of Access Control Policies

From Languages to Systems: Understanding Practical Application Development in Security-typed Languages

Security characterisation of software components and their composition

Mobile agents for secure electronic commerce transactions with privacy protection of the customers

Introduction to "building reliable secure computing systems out of unreliable insecure components"

A prototype secure workflow server

Security mechanisms for the MAP agent system

Secure composition of insecure components