Declarative Policies for Capability Control

No abstract is available for this paper.

• Publication year

  2014

• Venue

  IEEE Computer Security Foundations Symposium

• Publication date

  2014-07-19

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/CSF.2014.9
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Protection

  2018cited by this paper
• The need for capability policies

  2013cited by this paper
• Efficient dynamic access analysis using JavaScript proxies

  2013cited by this paper
• Trustworthy Proxies - Virtualizing Objects with Invariants

  2013cited by this paper
• Complete Monitors for Behavioral Contracts

  2012influential reference
• Information-Flow Security for a Core of JavaScript

  2012cited by this paper
• Chaperones and impersonators: run-time support for reasonable interposition

  2012cited by this paper
• Treehouse: Javascript Sandboxes to Help Web Developers Help Themselves

  2012influential reference
• Chaperones and impersonators

  2012cited by this paper
• Privilege Separation in HTML5 Applications

  2012cited by this paper
• JSand: complete client-side sandboxing of third-party JavaScript without browser modifications

  2012cited by this paper
• Type-Based Verification of JavaScript Sandboxing

  2011cited by this paper
• Automated Analysis of Security-Critical JavaScript APIs

  2011cited by this paper
• ADsafety: Type-Based Verification of JavaScript Sandboxing

  2011cited by this paper
• Correct blame for contracts: no more scapegoating

  2011cited by this paper
• Virtual values for language extension

  2011cited by this paper
• Preventing Capability Leaks in Secure JavaScript Subsets

  2010cited by this paper
• Proxies: design principles for robust object-oriented intercession APIs

  2010cited by this paper
• Permissive dynamic information flow analysis

  2010cited by this paper
• Object views: fine-grained sharing in browsers

  2010cited by this paper
• AdJail: Practical Enforcement of Confidentiality and Integrity Policies on Web Advertisements

  2010cited by this paper
• Design by Contract

  2010cited by this paper
• Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security

  2010cited by this paper
• Object Capabilities and Isolation of Untrusted Web Applications

  2010cited by this paper
• Staged information flow for javascript

  2009cited by this paper
• Cross-Origin JavaScript Capability Leaks: Detection, Exploitation, and Defense

  2009cited by this paper
• Semantics Engineering with PLT Redex

  2009cited by this paper
• Analysing the Information Flow Properties of Object-Capability Patterns

  2009cited by this paper
• Termination-Insensitive Noninterference Leaks More Than Just a Bit

  2008cited by this paper
• Analysing Object−Capability Security

  2008cited by this paper
• Delegating Responsibility in Digital Systems: Horton's "Who Done It?"

  2007cited by this paper
• Protection and communication abstractions for web browsers in MashupOS

  2007cited by this paper
• Patterns of safe collaboration

  2007cited by this paper
• Robust composition: towards a unified approach to access control and concurrency control

  2006influential reference
• On flow-sensitive security types

  2006cited by this paper
• Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study

  2005cited by this paper
• Dimensions and principles of declassification

  2005cited by this paper
• Language-based information-flow security

  2003cited by this paper
• Access Control Based on Execution History

  2003cited by this paper
• Capability Myths Demolished

  2003cited by this paper
• Information flow inference for ML

  2002cited by this paper
• Contracts for higher-order functions

  2002cited by this paper
• Programming Languages for Information Security

  2002cited by this paper
• Jif: java information flow

  1999cited by this paper
• EROS: a fast capability system

  1999cited by this paper
• The SLam calculus: programming with secrecy and integrity

  1998cited by this paper
• A sound type system for secure flow analysis

  1996cited by this paper
• Applying 'design by contract'

  1992cited by this paper
• A secure identity-based capability system

  1989cited by this paper
• Improving security and performance for capability systems

  1988cited by this paper
• Security Policies and Security Models

  1982cited by this paper
• LCF Considered as a Programming Language

  1977cited by this paper
• A note on the confinement problem

  1973cited by this paper
• Programming semantics for multiprogrammed computations

  1966cited by this paper

• Reasoning about External Calls

  2025cites this paper
• Necessity specifications for robustness

  2022cites this paper
• Preventing Dynamic Library Compromise on Node.js via RWX-Based Privilege Reduction

  2021cites this paper
• A Role-Based Orchestration Approach for Cloud Applications

  2021cites this paper
• Reconciling progress-insensitive noninterference and declassification

  2020cites this paper
• Controlling Module Authority Using Programming Language Design

  2020cites this paper
• Mir: Automated Quantifiable Privilege Reduction Against Dynamic Library Compromise in JavaScript

  2020cites this paper
• CallƐ: an effect system for method calls

  2019cites this paper
• Fine-Grained, Language-Based Access Control for Database-Backed Applications

  2019cites this paper
• Capabilities: Effects for Free

  2018cites this paper
• Higher-order contracts for JavaScript

  2018cites this paper
• Fine-grained, dynamic access control for database-backed applications

  2018cites this paper
• Abstract and Concrete Data Types vs Object Capabilities

  2018cites this paper
• Enabling End-to-End Orchestration of Multi-Cloud Applications

  2017cites this paper
• Specification and Analysis of Resource Utilization Policies for Human-Intensive Systems

  2017cites this paper
• A Capability-Based Module System for Authority Control (Artifact)

  2017influential citation
• Declarative policy support for cloud application orchestration

  2017cites this paper
• On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks

  2016cites this paper
• Extensible access control with authorization contracts

  2016cites this paper
• Reasoning about Object Capabilities with Logical Relations and Effect Parametricity

  2016cites this paper
• Abstract Data Types in Object-Capability Systems

  2016cites this paper
• Stephen Chong Research Statement

  2015cites this paper
• Reasoning About the State Change of Authorization Policies

  2015cites this paper
• C hainmail : Defensively Consistent Modular Specifications for an Open World

  2015cites this paper
• Reasoning about Risk and Trust in an Open Word

  2015cites this paper
• How to Break the Bank: Semantics of Capability Policies

  2014cites this paper
• Dynamic detection of object capability violations through model checking

  2014cites this paper
• On Owners-as-Accessors

  2014cites this paper
• Towards Capability Policy Specification and Verification

  2013cites this paper
• Mashic compiler: Mashup sandboxing based on inter-frame communication

  2012cites this paper