Notice

This is not the latest version of this item. The latest version can be found at: https://ecommons.cornell.edu/handle/1813/42406

Show simple item record

dc.contributor.authorArden, Owen
dc.contributor.authorMyers, Andrew C.
dc.date.accessioned2016-05-10T12:28:15Z
dc.date.available2016-02-13T17:44:18Z
dc.date.available2016-05-10T12:28:15Z
dc.date.issued2016-05-09
dc.identifier.urihttps://hdl.handle.net/1813/42406.2
dc.description.abstractReal-world applications routinely make authorization decisions based on dynamic computation. Reasoning about dynamically computed authority is challenging. Integrity of the system might be compromised if attackers can improperly influence the authorizing computation. Confidentiality can also be compromised by authorization, since authorization decisions are often based on sensitive data such as membership lists and passwords. Previous formal models for authorization do not fully address the security implications of permitting trust relationships to change, which limits their ability to reason about authority that derives from dynamic computation. Our goal is a way to construct dynamic authorization mechanisms that do not violate confidentiality or integrity.en_US
dc.description.abstractWe introduce the Flow-Limited Authorization Calculus (FLAC), which is both a simple, expressive model for reasoning about dynamic authorization and also an information flow control language for securely implementing various authorization mechanisms. FLAC combines the insights of two previous models: it extends the Dependency Core Calculus with features made possible by the Flow-Limited Authorization Model. FLAC provides strong end-to-end information security guarantees even for programs that incorporate and implement rich dynamic authorization mechanisms. These guarantees include noninterference and robust declassification, which prevent attackers from influencing information disclosures in unauthorized ways. We prove these security properties formally for all FLAC programs and explore the expressiveness of FLAC with several examples.
dc.description.sponsorshipThis work was supported by grant N00014-13-1-0089 from the Office of Naval Resesearch, by MURI grant FA9550-12-1-0400, and by a grant from the National Science Foundation (CCF-0964409).en_US
dc.language.isoen_USen_US
dc.relation.replaceshttp://hdl.handle.net/1813/42406.1
dc.relation.isreplacedbyhttp://hdl.handle.net/1813/42406
dc.subjectauthorizationen_US
dc.subjectinformation flow controlen_US
dc.subjectsecurityen_US
dc.subjecttrust managementen_US
dc.subjectlanguage-based securityen_US
dc.titleA Calculus for Flow-Limited Authorization: Technical Reporten_US


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record

VersionItemDateSummary

*Selected version

Statistics