Change search
ReferencesLink to record
Permanent link

Direct link
Security Monitor Inlining for Multithreaded Java
KTH, School of Computer Science and Communication (CSC), Theoretical Computer Science, TCS.ORCID iD: 0000-0001-5432-6442
KTH, School of Computer Science and Communication (CSC), Theoretical Computer Science, TCS.
2009 (English)In: ECOOP 2009: OBJECT-ORIENTED PROGRAMMING / [ed] Drossopoulou S, 2009, Vol. 5653, 546-569 p.Conference paper (Refereed)
Abstract [en]

Program monitoring is a well-established and efficient approach to security policy enforcement. An implementation of program monitoring that is particularly appealing for application-level policy enforcement is monitor inlining: the application is rewritten to push monitoring and policy enforcement code into the application itself. The intention is that the inserted code enforces compliance with the policy (security), and otherwise interferes with the application as little as possible (conservativity and transparency). For sequential Java-like languages, provably correct inlining algorithms have been proposed, but for the multithreaded setting, this is still an open problem. We show that no inliner for multithreaded Java can be both secure and transparent. It is however possible to identify a broad class of policies for which all three correctness criteria can be obtained. We propose an inliner that is correct for such policies, implement it for Java, and show that it is practical by reporting on some benchmarks.

Place, publisher, year, edition, pages
2009. Vol. 5653, 546-569 p.
, Lecture Notes in Computer Science, ISSN 0302-9743 ; 5653
Keyword [en]
Conservativity, Correctness criterion, Inlining, Multithreaded, Open problems, Policy enforcement, Program monitoring, Security policy enforcement, Object oriented programming
National Category
Computer Science
URN: urn:nbn:se:kth:diva-30709DOI: 10.1007/978-3-642-03013-0_25ISI: 000268998700023ScopusID: 2-s2.0-69949167255ISBN: 978-3-642-03012-3OAI: diva2:402851
23rd European Conference on Object-Oriented Programming (ECOOP 2009), Genoa, ITALY, JUL 06-10, 2009
QC 20110310Available from: 2011-03-10 Created: 2011-03-04 Last updated: 2012-01-20Bibliographically approved

Open Access in DiVA

No full text

Other links

Publisher's full textScopus

Search in DiVA

By author/editor
Dam, MadsLundblad, Andreas
By organisation
Theoretical Computer Science, TCS
Computer Science

Search outside of DiVA

GoogleGoogle Scholar
The number of downloads is the sum of all downloads of full texts. It may include eg previous versions that are now no longer available

Altmetric score

Total: 34 hits
ReferencesLink to record
Permanent link

Direct link