Provably correct inline monitoring for multithreaded Java-like programs

Inline reference monitoring is a powerful technique to enforce security policies on untrusted programs. The security-by-contract paradigm proposed by the EU FP6 S3 MS project uses policies, monitoring, and monitor inlining to secure third-party applications running on mobile devices. The focus of this paper is on multi-threaded Java bytecode. An important consideration is that inlining should interfere with the client program only when mandated by the security policy. In a multithreaded setting, however, this requirement turns out to be problematic. Generally, inliners use locks to control access to shared resources such as an embedded monitor state. This will interfere with application 1 

• Type: Journal
• Year: 2010
• Where: JCS
• Authors: Mads Dam, Bart Jacobs 0002, Andreas Lundblad, Frank Piessens
• Keywords: Embedded Monitor State, Inline Reference Monitoring, Inlining, JCS 2010