research-article

Paragon: Programming with Information Flow Control (Demo)

Authors:

Niklas Broberg,

Bart van Delft,

David SandsAuthors Info & Claims

PLAS'14: Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security

Pages 79 - 80

https://doi.org/10.1145/2637113.2637122

Published: 28 July 2014 Publication History

Get Access

Abstract

We demonstrate Paragon, a Java-based programming language with integrated information-flow control. We show how the use of information-flow policies combined with encapsulation allows for simple yet powerful and flexible policy libraries tailored to the needs of a particular application or system.

References

[1]

J. Aldrich, J. Sunshine, D. Saini, and Z. Sparks. Typestate-oriented programming. In OOPSLA Companion, pages 1015--1022, 2009.

Digital Library

Google Scholar

[2]

N. Broberg and D. Sands. Paralocks -- role-based information flow control and beyond. In POPL'10, Proceedings of the 37th Annual ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages, 2010.

Digital Library

Google Scholar

[3]

N. Broberg, B. van Delft, and D. Sands. Paragon for practical programming with information-flow control. In APLAS'13, Proceedings of the 11th Asian Symposium on Programming Languages and Systems, 2013.

Digital Library

Google Scholar

[4]

S. Zdancewic and A. C. Myers. Robust declassification. In Proc. IEEE Computer Security Foundations Workshop, pages 15--23, June 2001.

Digital Library

Google Scholar

Index Terms

Paragon: Programming with Information Flow Control (Demo)
1. Software and its engineering

Recommendations

Paragon for Practical Programming with Information-Flow Control
Proceedings of the 11th Asian Symposium on Programming Languages and Systems - Volume 8301

Conventional security policies for software applications are adequate for managing concerns on the level of access control. But standard abstraction mechanisms of mainstream programming languages are not sufficient to express how information is allowed ...
Paragon – Practical programming with information flow control
Verified information flow security

Conventional security policies for software applications are adequate for managing concerns on the level of access control. But standard abstraction mechanisms of mainstream programming languages are not sufficient to express how information is allowed to ...
Downgrading policies and relaxed noninterference
Proceedings of the 32nd ACM SIGPLAN-SIGACT symposium on Principles of programming languages

In traditional information-flow type systems, the security policy is often formalized as noninterference properties. However, noninterference alone is too strong to express security properties useful in practice. If we allow downgrading in such systems, ...

Comments

Information & Contributors

Information

Published In

PLAS'14: Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security

July 2014

83 pages

ISBN:9781450328623

DOI:10.1145/2637113

General Chairs:
Alejandro Russo
Chalmers University of Technology
,
Omer Tripp
IBM T. J. Watson Research Center

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

In-Cooperation

Uppsala University, Department of Information Science: Uppsala University, Department of Information Science
SIGPLAN: ACM Special Interest Group on Programming Languages
SIGSOFT: ACM Special Interest Group on Software Engineering
AITO: Assoc Internationale por les Technologies Objects

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 28 July 2014

Check for updates

Author Tags

Qualifiers

Research-article
Research
Refereed limited

Conference

ECOOP '14

ECOOP '14: European Conference on Object-Oriented Programming

July 28 - August 1, 2014

Uppsala, Sweden

Acceptance Rates

PLAS'14 Paper Acceptance Rate 6 of 10 submissions, 60%;

Overall Acceptance Rate 43 of 77 submissions, 56%

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

0
Total Citations
98
Total Downloads

Downloads (Last 12 months)4
Downloads (Last 6 weeks)1

Reflects downloads up to 15 Jan 2025

Other Metrics

View Author Metrics

Citations

View Options

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Index Terms

Recommendations

Paragon for Practical Programming with Information-Flow Control

Paragon – Practical programming with information flow control

Downgrading policies and relaxed noninterference

Comments

Published In

In-Cooperation

Publisher

Publication History

Check for updates

Author Tags

Qualifiers

Conference

Acceptance Rates

Other Metrics

Article Metrics

Other Metrics

Login options

Full Access

PDF

eReader

Abstract

References

Index Terms

Recommendations

Paragon for Practical Programming with Information-Flow Control

Paragon – Practical programming with information flow control

Downgrading policies and relaxed noninterference

Comments

Information

Published In

In-Cooperation

Publisher

Publication History

Check for updates

Author Tags

Qualifiers

Conference

Acceptance Rates

Contributors

Other Metrics

Bibliometrics

Article Metrics

Other Metrics

Citations

Login options

Full Access

View options

PDF

eReader

Figures

Other

Share

Share this Publication link

Share on social media

Affiliations