research-article

Building Secure Systems with LIO (Demo)

Authors:

Deian Stefan,

David MaziéresAuthors Info & Claims

PLAS'14: Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security

Pages 25 - 26

https://doi.org/10.1145/2637113.2637121

Published: 28 July 2014 Publication History

Get Access

Abstract

LIO is an information flow control (IFC) system. In this demo, we give an overview of the Haskell LIO library and show how LIO can be used to build secure systems. In particular, we show how to build secure web applications with high-level data-security policies and describe how LIO automatically enforces these policies.

References

[1]

D. B. Giffin, A. Levy, D. Stefan, D. Terei, D. Mazières, J. Mitchell, and A. Russo. Hails: Protecting data privacy in untrusted web applications. In Proc. of the 10th OSDI, pages 47--60. USENIX, 2012.

Digital Library

Google Scholar

[2]

A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE JSAC, 21(1):5--19, 2003.

Digital Library

Google Scholar

[3]

D. Stefan, A. Russo, J. C. Mitchell, and D. Mazières. Flexible dynamic information flow control in Haskell. In Haskell Symposium, pages 95--106. ACM SIGPLAN, 2011.

Digital Library

Google Scholar

[4]

D. Stefan, A. Russo, P. Buiras, A. Levy, J. C. Mitchell, and D. Mazières. Addressing covert termination and timing channels in concurrent information flow systems. In Proc. of the 17th ICFP, pages 201--214. ACM SIGPLAN, 2012.

Digital Library

Google Scholar

Index Terms

Building Secure Systems with LIO (Demo)
1. Software and its engineering

Recommendations

Building secure systems with LIO (demo)
Haskell '14

LIO is a decentralized information flow control (DIFC) system, implemented in Haskell. In this demo proposal, we give an overview of the LIO library and show how LIO can be used to build secure systems. In particular, we show how to specify high-level ...
Building secure systems with LIO (demo)
Haskell '14: Proceedings of the 2014 ACM SIGPLAN symposium on Haskell

LIO is a decentralized information flow control (DIFC) system, implemented in Haskell. In this demo proposal, we give an overview of the LIO library and show how LIO can be used to build secure systems. In particular, we show how to specify high-level ...
Dynamic Enforcement of Dynamic Policies
PLAS'15: Proceedings of the 10th ACM Workshop on Programming Languages and Analysis for Security

This paper presents SLIO, an information-flow control mechanism enforcing dynamic policies: security policies which change the relation between security levels while the system is running. SLIO builds on LIO, a floating-label information-flow control ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

PLAS'14: Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security

July 2014

83 pages

ISBN:9781450328623

DOI:10.1145/2637113

General Chairs:
Alejandro Russo
Chalmers University of Technology
,
Omer Tripp
IBM T. J. Watson Research Center

Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the Owner/Author.

In-Cooperation

Uppsala University, Department of Information Science: Uppsala University, Department of Information Science
SIGPLAN: ACM Special Interest Group on Programming Languages
SIGSOFT: ACM Special Interest Group on Software Engineering
AITO: Assoc Internationale por les Technologies Objects

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 28 July 2014

Check for updates

Author Tags

Qualifiers

Research-article
Research
Refereed limited

Conference

ECOOP '14

ECOOP '14: European Conference on Object-Oriented Programming

July 28 - August 1, 2014

Uppsala, Sweden

Acceptance Rates

PLAS'14 Paper Acceptance Rate 6 of 10 submissions, 60%;

Overall Acceptance Rate 43 of 77 submissions, 56%

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

0
Total Citations
56
Total Downloads

Downloads (Last 12 months)2
Downloads (Last 6 weeks)0

Reflects downloads up to 10 Nov 2024

Other Metrics

View Author Metrics

Citations

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Index Terms

Recommendations

Building secure systems with LIO (demo)

Building secure systems with LIO (demo)

Dynamic Enforcement of Dynamic Policies