论文标题
使用期货的活动对象语言中的信息流控制的安全包装器
Security Wrappers for Information-Flow Control in Active Object Languages with Futures
论文作者
论文摘要
本文介绍了一种运行时机制，以防止分布式系统中安全信息泄漏。我们考虑了一个通用并发语言模型，其中并发对象通过异步方法调用和期货相互作用。目的是防止向低级观众泄漏机密信息。该方法基于安全包装器的概念，该概念包含对象或组件并控制其与环境的交互。包装器是运行时系统添加的一种机制，可根据某些安全策略来保护不安全组件。包装器的安全策略是根据安全级别的概念正式化的。在运行时，未来的组件将根据需要包装，而只有不安全类的对象将使用静态检查来限制不安全类的数量，从而减少运行时的开销。我们定义了一种操作语义，并证明满足了不干预。服务提供商可以使用包装器在不安全的环境中保护其服务，反之亦然：系统平台可以使用包装器来保护自己免受不安全的服务提供商的侵害。
This paper introduces a run-time mechanism for preventing leakage of secure information in distributed systems. We consider a general concurrency language model, where concurrent objects interact by asynchronous method calls and futures. The aim is to prevent leakage of confidential information to low-level viewers. The approach is based on the notion of a security wrapper, which encloses an object or a component and controls its interactions with the environment. A wrapper is a mechanism added by the run-time system to provide protection of an insecure component according to some security policies. The security policies of a wrapper are formalized based on a notion of security levels. At run-time, future components will be wrapped upon need, while only objects of unsafe classes will be wrapped, using static checking to limit the number of unsafe classes and thereby reducing run-time overhead. We define an operational semantics and prove that non-interference is satisfied. A service provider may use wrappers to protect its services in an insecure environment, and vice-versa: a system platform may use wrappers to protect itself from insecure service providers.
