TY - GEN
T1 - Information flow analysis for valued-indexed data security compartments
AU - Lourenço, Luísa
AU - Caires, Luís
PY - 2014
Y1 - 2014
N2 - Data-intensive applications as popularised by cloud computing raise many security challenges, due to the large number of remote users involved and multi-tenancy. Frequently, the security compartment associated to data stored in shared containers, such as database tables, is not determined by the static structure of the database schema, but depends on runtime data values, as required to ensure so-called "row-level" security. In this paper, we investigate a programming language approach to these issues, based on a -calculus extended with data manipulation primitives. We develop a type-based information flow analysis introducing a notion of value-indexed security labels, representing value-indexed security levels, or compartments. Our results ensure that well-typed programs do not break confidentiality constraints imposed by a declared security discipline.
AB - Data-intensive applications as popularised by cloud computing raise many security challenges, due to the large number of remote users involved and multi-tenancy. Frequently, the security compartment associated to data stored in shared containers, such as database tables, is not determined by the static structure of the database schema, but depends on runtime data values, as required to ensure so-called "row-level" security. In this paper, we investigate a programming language approach to these issues, based on a -calculus extended with data manipulation primitives. We develop a type-based information flow analysis introducing a notion of value-indexed security labels, representing value-indexed security levels, or compartments. Our results ensure that well-typed programs do not break confidentiality constraints imposed by a declared security discipline.
UR - http://www.scopus.com/inward/record.url?scp=84901360370&partnerID=8YFLogxK
U2 - 10.1007/978-3-319-05119-2_11
DO - 10.1007/978-3-319-05119-2_11
M3 - Conference contribution
AN - SCOPUS:84901360370
SN - 978-331905118-5
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 180
EP - 198
BT - Trustworthy Global Computing
A2 - Abadi , Martín
A2 - Lafuente, Alberto Lluch
PB - Springer International Publishing
T2 - 8th International Symposium on Trustworthy Global Computing, TGC 2013
Y2 - 30 August 2013 through 31 August 2013
ER -