Integration of XML streams in information flow analysis for Java - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports (Technical Report) Year : 2010

Integration of XML streams in information flow analysis for Java

Abstract

In this report we present an extension of an existing flow-sensitive analysis for secure information flow for Java bytecode that deals with flows of data from and to XML streams governed by an access control mechanism. Our approach consists in computing, at different program points, an abstract XML content graph (AXCG) which tracks data read from and written to XML streams relying on data tracked in the existing information flow analysis. The extension we propose to manage XML content is generic enough to permit connection with any role-based access control mechanism for XML. On the contrary to many information flow techniques, our approach does not require security levels to be known during the analysis: security aspects of information flow and access control mechanisms for XML are checked a posteriori with security levels either inferred from access control policies for XML streams, or given by the information flow policy for the rest of the program.
Fichier principal
Vignette du fichier
RT-0387.pdf (416.6 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00511118 , version 1 (23-08-2010)

Identifiers

  • HAL Id : inria-00511118 , version 1

Cite

Arnaud Fontaine. Integration of XML streams in information flow analysis for Java. [Technical Report] RT-0387, INRIA. 2010, pp.37. ⟨inria-00511118⟩
187 View
83 Download

Share

Gmail Facebook Twitter LinkedIn More