Controlling the What and Where of Declassification in Language-Based Security Export

@incollection{citeulike:2329886, abstract = {While a rigorous information flow analysis is a key step in obtaining meaningful end-to-end confidentiality guarantees, one must also permit possibilities for declassification. Sabelfeld and Sands categorized the existing approaches to controlling declassification in their overview along four dimensions and according to four prudent principles [16]. In this article, we propose three novel security conditions for controlling the dimensions where and what, and we explain why these conditions constitute improvements over prior approaches. Moreover, we present a type-based security analysis and, as another novelty, prove a soundness result that considers more than one dimension of declassification.}, author = {Mantel, Heiko and Reinhard, Alexander}, citeulike-article-id = {2329886}, citeulike-linkout-0 = {http://dx.doi.org/10.1007/978-3-540-71316-6_11}, doi = {10.1007/978-3-540-71316-6_11}, journal = {Programming Languages and Systems}, keywords = {declassification, information\_flow}, pages = {141--156}, posted-at = {2008-02-04 16:11:01}, priority = {2}, title = {Controlling the What and Where of Declassification in Language-Based Security}, url = {http://dx.doi.org/10.1007/978-3-540-71316-6_11}, year = {2007} }

TY - CHAP ID - citeulike:2329886 L3 - citeulike-article-id:2329886 N2 - While a rigorous information flow analysis is a key step in obtaining meaningful end-to-end confidentiality guarantees, one must also permit possibilities for declassification. Sabelfeld and Sands categorized the existing approaches to controlling declassification in their overview along four dimensions and according to four prudent principles [16]. In this article, we propose three novel security conditions for controlling the dimensions where and what, and we explain why these conditions constitute improvements over prior approaches. Moreover, we present a type-based security analysis and, as another novelty, prove a soundness result that considers more than one dimension of declassification. JF - Programming Languages and Systems EP - 156 TI - Controlling the What and Where of Declassification in Language-Based Security SP - 141 KW - declassification KW - information_flow AU - Mantel, Heiko AU - Reinhard, Alexander PY - 2007/// UR - http://dx.doi.org/10.1007/978-3-540-71316-6_11 ER -