Resource Access and Mobility Control with Dynamic Privileges Acquisition

µKlaim is a process language that permits programming distributed systems made up of several mobile components interacting through multiple distributed tuple spaces. We present the language and a type system for controlling the activities, e.g. access to resources and mobility, of the processes in a net. By dealing with privileges acquisition, the type system enables dynamic variations of security policies. We exploit a combination of static and dynamic type checking, and of inlined reference monitoring, to guarantee absence of run-time errors due to lack of privileges and state two type soundness results: one involves whole nets, the other is relative to subnets of larger nets.

• Type: Conference
• Year: 2003
• Where: ICALP
• Authors: Daniele Gorla, Rosario Pugliese
• Keywords: Dynamic Type Checking, ICALP 2003, Inlined Reference Monitoring, Multiple Distributed Tuple, Theoretical Computer Science