demonstration

Building secure systems with LIO (demo)

Authors:

Deian Stefan,

Amit Levy,

Alejandro Russo,

David MaziéresAuthors Info & Claims

Haskell '14: Proceedings of the 2014 ACM SIGPLAN symposium on Haskell

Pages 93 - 94

https://doi.org/10.1145/2633357.2633371

Published: 03 September 2014 Publication History

Get Access

Abstract

LIO is a decentralized information flow control (DIFC) system, implemented in Haskell. In this demo proposal, we give an overview of the LIO library and show how LIO can be used to build secure systems. In particular, we show how to specify high-level security policies in the context of web applications, and describe how LIO automatically enforces these policies even in the presence of untrusted code.

References

[1]

D. B. Giffin, A. Levy, D. Stefan, D. Terei, D. Mazi'eres, J. Mitchell, and A. Russo. Hails: Protecting data privacy in untrusted web applications. In Proc. of the 10th OSDI, pages 47--60. USENIX, 2012.

Digital Library

Google Scholar

[2]

C. Hriţcu, M. Greenberg, B. Karel, B. C. Pierce, and G. Morrisett. All your ifcexception are belong to us. In Proc. of the IEEE Symp. on Security and Privacy, 2013.

Digital Library

Google Scholar

[3]

A. C. Myers and B. Liskov. A decentralized model for information flow control. In Proc. of the 16th SOSP, pages 129--142, 1997.

Digital Library

Google Scholar

[4]

A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, 21(1), 2003.

Digital Library

Google Scholar

[5]

D. Stefan, A. Russo, D. Mazi'eres, and J. C. Mitchell. Disjunction category labels. In NordSec 2011, LNCS. Springer, 2011.

Digital Library

Google Scholar

[6]

D. Stefan, A. Russo, J. C. Mitchell, and D. Mazi'eres. Flexible dynamic information flow control in Haskell. In Haskell Symposium, pages 95--106. ACM SIGPLAN, 2011.

Digital Library

Google Scholar

[7]

D. Stefan, A. Russo, P. Buiras, A. Levy, J. C.Mitchell, and D.Mazi'eres. Addressing covert termination and timing channels in concurrent information flow systems. In Proc. of the 17th ICFP, 2012.

Digital Library

Google Scholar

[8]

D. Stefan, A. Russo, J. C. Mitchell, and D. Mazi'eres. Flexible dynamic information flow control in the presence of exceptions. Arxiv preprint arXiv:1207.1457, 2012.

Google Scholar

[9]

D. Terei, S.Marlow, S. Peyton Jones, and D. Mazi'eres. Safe Haskell. In ACM SIGPLAN Notices, volume 47, pages 137--148. ACM, 2012.

Digital Library

Google Scholar

Index Terms

Building secure systems with LIO (demo)
1. Software and its engineering
  1. Software notations and tools
    1. General programming languages
      1. Language features

Recommendations

Building secure systems with LIO (demo)
Haskell '14

LIO is a decentralized information flow control (DIFC) system, implemented in Haskell. In this demo proposal, we give an overview of the LIO library and show how LIO can be used to build secure systems. In particular, we show how to specify high-level ...
Building Secure Systems with LIO (Demo)
PLAS'14: Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security

LIO is an information flow control (IFC) system. In this demo, we give an overview of the Haskell LIO library and show how LIO can be used to build secure systems. In particular, we show how to build secure web applications with high-level data-security ...
Demo proposal: making web applications -XSafe
Haskell '14: Proceedings of the 2014 ACM SIGPLAN symposium on Haskell

Simple is a web framework for Haskell. Simple came out of our work on Hails, a platform for secure web applications. For Hails, we needed a flexible web framework that uses no unsafe language features and can be used to build apps outside the IO monad. ...

Comments

Information & Contributors

Information

Published In

Haskell '14: Proceedings of the 2014 ACM SIGPLAN symposium on Haskell

September 2014

154 pages

ISBN:9781450330411

DOI:10.1145/2633357

Program Chair:
Wouter Swierstra
Universiteit Utrecht, the Netherlands

ACM SIGPLAN Notices Volume 49, Issue 12
Haskell '14
December 2014
141 pages
ISSN:0362-1340
EISSN:1558-1160
DOI:10.1145/2775050
Editor:
Andy Gill
University of Kansas, Lawrence, KS
Issue’s Table of Contents

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 03 September 2014

Check for updates

Author Tags

Qualifiers

Demonstration

Funding Sources

Defense Advanced Research Projects Agency

Conference

ICFP'14

Sponsor:

SIGPLAN

ICFP'14: ACM SIGPLAN International Conference on Functional Programming

September 4 - 5, 2014

Gothenburg, Sweden

Acceptance Rates

Haskell '14 Paper Acceptance Rate 12 of 28 submissions, 43%;

Overall Acceptance Rate 57 of 143 submissions, 40%

Upcoming Conference

ICFP '25

Sponsor:
sigplan

ACM SIGPLAN International Conference on Functional Programming

October 12 - 18, 2025

Singapore , Singapore

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

1
Total Citations
View Citations
125
Total Downloads

Downloads (Last 12 months)3
Downloads (Last 6 weeks)0

Reflects downloads up to 08 Feb 2025

Other Metrics

View Author Metrics

Citations

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Full Access

Get this Publication

View options

PDF

View or Download as a PDF file.

PDF

eReader

View online with eReader.

eReader

Abstract

References

Index Terms

Recommendations