Secure program partitioning

This paper presents secure program partitioning, a language-based technique for protecting confidential data during computation in distributed systems containing mutually untrusted hosts. Confidentiality and integrity policies can be expressed by annotating programs with security types that constrain information flow; these programs can then be partitioned automatically to run securely on heterogeneously trusted hosts. The resulting communicating subprograms collectively implement the original program, yet the system as a whole satisfies the security requirements of participating principals without requiring a universally trusted host machine. The experience in applying this methodology and the performance of the resulting distributed code suggest that this is a promising way to obtain secure distributed computation. This article is an expanded version of the published paper "Untrusted Hosts and Confidentiality: Secure Program Partitioning" [54]. The main difference between ...

• Type: Journal
• Year: 2002
• Where: TOCS
• Authors: Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers
• Keywords: Secure Distributed Computation, Secure Program Partitioning, TOCS 2002, Untrusted Hosts