A Type System for Access Control Views in Object-Oriented Languages

Luís Manuel Marques da Costa Caires

doi:10.1007/978-3-642-16074-5

A Type System for Access Control Views in Object-Oriented Languages

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

Access control to objects in common object-oriented languages is statically verified but cannot be changed at run-time. However, dynamic authorization is required by most applications and it would be desirable to check more flexible access control policies also statically, at least partially. In this work, we introduce a model where "views" to object references represent the current access control policy of a principal for a given object, and first class authorizations support dynamic modification of those policies. To demonstrate our concepts, we have developed a core language, equipped with a provably correct type and effect system capable of detecting unauthorized method calls at compile-time, and defined and implemented a typechecking algorithm.

Original language	Unknown
Title of host publication	Lecture Notes in Computer Science
Pages	59-76
DOIs	https://doi.org/10.1007/978-3-642-16074-5
Publication status	Published - 1 Jan 2010
Event	Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security (ARSPA-WITS) - Duration: 1 Jan 2010 → …

Conference

Conference	Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security (ARSPA-WITS)
Period	1/01/10 → …

Access to Document

10.1007/978-3-642-16074-5

Cite this

@inproceedings{63168d3d31494282b8f2bcf132650b61,

title = "A Type System for Access Control Views in Object-Oriented Languages",

abstract = "Access control to objects in common object-oriented languages is statically verified but cannot be changed at run-time. However, dynamic authorization is required by most applications and it would be desirable to check more flexible access control policies also statically, at least partially. In this work, we introduce a model where {"}views{"} to object references represent the current access control policy of a principal for a given object, and first class authorizations support dynamic modification of those policies. To demonstrate our concepts, we have developed a core language, equipped with a provably correct type and effect system capable of detecting unauthorized method calls at compile-time, and defined and implemented a typechecking algorithm.",

author = "Caires, {Lu{\'i}s Manuel Marques da Costa}",

year = "2010",

month = jan,

day = "1",

doi = "10.1007/978-3-642-16074-5",

language = "Unknown",

isbn = "978-3-642-16073-8",

pages = "59--76",

booktitle = "Lecture Notes in Computer Science",

note = "Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security (ARSPA-WITS) ; Conference date: 01-01-2010",

}

TY - GEN

T1 - A Type System for Access Control Views in Object-Oriented Languages

AU - Caires, Luís Manuel Marques da Costa

PY - 2010/1/1

Y1 - 2010/1/1

N2 - Access control to objects in common object-oriented languages is statically verified but cannot be changed at run-time. However, dynamic authorization is required by most applications and it would be desirable to check more flexible access control policies also statically, at least partially. In this work, we introduce a model where "views" to object references represent the current access control policy of a principal for a given object, and first class authorizations support dynamic modification of those policies. To demonstrate our concepts, we have developed a core language, equipped with a provably correct type and effect system capable of detecting unauthorized method calls at compile-time, and defined and implemented a typechecking algorithm.

AB - Access control to objects in common object-oriented languages is statically verified but cannot be changed at run-time. However, dynamic authorization is required by most applications and it would be desirable to check more flexible access control policies also statically, at least partially. In this work, we introduce a model where "views" to object references represent the current access control policy of a principal for a given object, and first class authorizations support dynamic modification of those policies. To demonstrate our concepts, we have developed a core language, equipped with a provably correct type and effect system capable of detecting unauthorized method calls at compile-time, and defined and implemented a typechecking algorithm.

U2 - 10.1007/978-3-642-16074-5

DO - 10.1007/978-3-642-16074-5

M3 - Conference contribution

SN - 978-3-642-16073-8

SP - 59

EP - 76

BT - Lecture Notes in Computer Science

T2 - Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security (ARSPA-WITS)

Y2 - 1 January 2010

ER -