CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
To be practical, systems for ensuring secure information flow must be as permissive as possible. To this end, the author recently proposed a type system for multi-threaded progra...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
This paper defines a framework in which one can formalize a variety of authorization and policy issues that arise in access control of shared computing resources. Instantiations ...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
A type confusion attack is one in which a principal accepts data of one type as data of another. Although it has been shown by Heather et al. that there are simple formatting conv...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
SPKI/SDSI is a language for expressing distributed access control policy, derived from SPKI and SDSI. We provide a first-order logic (FOL) semantics for SDSI, and show that it ha...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
A type system is presented that combines a weak form of information flow control, termed distributed access control in the paper, with typed cryptographic operations. The motivat...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
We investigate a number of issues related to identity based authenticated key agreement protocols using the Weil or Tate pairings. These issues include how to make protocols effici...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
We perform a systematic expansion of protocol narrations into terms of a process algebra in order to make precise some of the detailed checks that need to be made in a protocol. W...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
Access control mechanisms are widely used with the intent of enforcing confidentiality and other policies, but few formal connections have been made between information flow and...
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
CSFW
2003
IEEE
14 years 4 months ago
2003
IEEE
A policy describes the conditions under which an action is permitted or forbidden. We show that a fragment of (multi-sorted) first-order logic can be used to represent and reason...