User loginNavigation |
Policy as TypesSophia Drossopolou, Greg Meredith, and I have written a paper demonstrating that we can use Caires' behavioral-spatial types to write security policies for objects in an ocap-secure language; then it's possible for the compiler to statically check that the implementation satisfies the policy. In an object capability language, dependency injection is the only way you get access to any ability to side-effect the world; all authority is embodied in object references, which are unforgeable. To deny someone the ability to perform an action, you simply do not give them a reference to the object that performs it. We focused on demonstrating that we can type deniability in the paper. Lucius G Meredith, Mike Stay, Sophia Drossopoulou, "Policy as Types". Greg and I are currently seeking crowdfunding to build a platform called splicious; should we get funded, part of our plan is to port the spatial logic model checker to Scala and add spatial-behavioral types as annotations with a plugin. By mikestay at 2014-05-07 16:26 | LtU Forum | previous forum topic | next forum topic | other blogs | 2745 reads
|
Browse archives
Active forum topics |
Recent comments
23 weeks 13 min ago
23 weeks 4 hours ago
23 weeks 4 hours ago
45 weeks 1 day ago
49 weeks 3 days ago
51 weeks 11 hours ago
51 weeks 11 hours ago
1 year 1 week ago
1 year 6 weeks ago
1 year 6 weeks ago