Non-interference for a typed assembly language

Mostrar todas las versiones(2)

Detalles Bibliográficos
Autor Principal:	Medel, Ricardo H.
Otros autores o Colaboradores:	Bonelli, Eduardo, Compagnoni, Adriana
Formato:	Capítulo de libro
Lengua:	inglés
Series:	^p Datos electrónicos (1 archivo : 152 KB)
Temas:	SISTEMAS OPERATIVOS CONTROL DE FLUJO DE INFORMACIÓN SEGURIDAD Y PROTECCIÓN LENGUAJE ENSAMBLADOR
Acceso en línea:	www.lifia.info.unlp.edu.ar/papers/2005/Bonelli2005b.pdf Consultar en el Cátalogo
Resumen:	Non-interference is a desirable property of systems in a multilevel security architecture, stating that confidential information is not disclosed in public output. The challenge of studying information flow for assembly languages is that the control flow constructs that guide the analysis in high-level languages are not present. To address this problem, we define a typed assembly language that uses pseudo-instructions to impose a stack discipline on the control flow of programs. We develop a type system for checking that assembly programs enjoy non-interference and its proof of soundness.
Notas:	Formato de archivo: PDF. -- Este documento es producción intelectual de la Facultad de Informática-UNLP (Colección BIPA / Biblioteca.) -- Disponible también en línea (Cons. 12-03-2008)

MARC


LEADER	00000naa a2200000 a 4500
003	AR-LpUFIB
005	20250423182953.0
008	230201s2005 xxu o 000 0 eng d
024	8		\|a DIF-M2386 \|b 2473 \|z DIF002288
040			\|a AR-LpUFIB \|b spa \|c AR-LpUFIB
100	1		\|a Medel, Ricardo H. \|9 46174
245	1	0	\|a Non-interference for a typed assembly language
490	0		\|a ^p Datos electrónicos (1 archivo : 152 KB)
500			\|a Formato de archivo: PDF. -- Este documento es producción intelectual de la Facultad de Informática-UNLP (Colección BIPA / Biblioteca.) -- Disponible también en línea (Cons. 12-03-2008)
520			\|a Non-interference is a desirable property of systems in a multilevel security architecture, stating that confidential information is not disclosed in public output. The challenge of studying information flow for assembly languages is that the control flow constructs that guide the analysis in high-level languages are not present. To address this problem, we define a typed assembly language that uses pseudo-instructions to impose a stack discipline on the control flow of programs. We develop a type system for checking that assembly programs enjoy non-interference and its proof of soundness.
534			\|a Foundations of Computer Security International Workshop, satellite event of LICS05, IEEE Computer Society, June 2005.
650		4	\|a SISTEMAS OPERATIVOS \|9 43187
650		4	\|a CONTROL DE FLUJO DE INFORMACIÓN \|9 46172
650		4	\|a SEGURIDAD Y PROTECCIÓN \|9 42830
650		4	\|a LENGUAJE ENSAMBLADOR \|9 43150
700	1		\|a Bonelli, Eduardo \|9 44942
700	1		\|a Compagnoni, Adriana \|9 46173
856	4	0	\|u www.lifia.info.unlp.edu.ar/papers/2005/Bonelli2005b.pdf
942			\|c CP
952			\|0 0 \|1 0 \|4 0 \|6 A0053 \|7 3 \|8 BD \|9 76501 \|a DIF \|b DIF \|d 2025-03-11 \|l 0 \|o A0053 \|r 2025-03-11 17:02:38 \|u http://catalogo.info.unlp.edu.ar/meran/getDocument.pl?id=55 \|w 2025-03-11 \|y CP
999			\|c 52184 \|d 52184

foreach (glob($this->path . '/sess_*') as $filename) { if (filemtime($filename) + $maxlifetime < time()) { unlink($filename); } } return true; } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ protected function saveSession($sessId, $data): bool { $sessFile = $this->path . '/sess_' . $sessId; if ($handle = fopen($sessFile, 'w')) { $return = false; // Lock the file for exclusive access to avoid issues with multiple // processes writing session simultaneously: if (flock($handle, LOCK_EX)) { $return = fwrite($handle, $data); // Make sure that there's no trailing data by truncating the file to // the correct length: ftruncate($handle, strlen($data)); fflush($handle); flock($handle, LOCK_UN); } fclose($handle); if ($return !== false) { return true; } } // If we got this far, something went wrong with the file output... // It is tempting to throw an exception here, but this code is called // outside of the context of exception handling, so all we can do is // echo a message.

// Anecdotal testing Today and Yesterday seems to indicate destroy() // is called by the garbage collector and everything is good. // Something to keep in mind though. return true; } /** * Write function that is called when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ public function write($sessId, $data): bool { if ($this->writesDisabled) { return true; } return $this->saveSession($sessId, $data); } /** * A function that is called internally when session data is to be saved. * * @param string $sessId The current session ID * @param string $data The session data to write * * @return bool */ abstract protected function saveSession($sessId, $data): bool; }

* * @return void */ public function writeClose() { // The assumption is that we're using PHP's ext/session. // session_write_close() will actually overwrite $_SESSION with an // empty array on completion -- which leads to a mismatch between what // is in the storage object and $_SESSION. To get around this, we // temporarily reset $_SESSION to an array, and then re-link it to // the storage object. // // Additionally, while you _can_ write to $_SESSION following a // session_write_close() operation, no changes made to it will be // flushed to the session handler. As such, we now mark the storage // object isImmutable. $storage = $this->getStorage(); if (! $storage->isImmutable()) { $_SESSION = $storage->toArray(true); session_write_close(); $storage->fromArray($_SESSION); $storage->markImmutable(); } } /** * Attempt to set the session name * * If the session has already been started, or if the name provided fails * validation, an exception will be raised. * * @param string $name * @return SessionManager * @throws Exception\InvalidArgumentException */ public function setName($name) { if ($this->sessionExists()) { throw new Exception\InvalidArgumentException( 'Cannot set session name after a session has already started'

Environment & details:

GET Data empty

POST Data empty

Files empty

Key	Value
language	"es"
VUFIND_SESSION	"2nrpb7spfu1shlvt6ue946gt7b"
ui	"standard"

Session

Key	Value
__Laminas	array:2 [`"_REQUEST_ACCESS_TIME" => 1749544949.6533 "_VALID" => array:1 [ "Laminas\Session\Validator\Id" => "2nrpb7spfu1shlvt6ue946gt7b" ]`]
SessionState	Laminas\Stdlib\ArrayObject {#906}
FlashMessenger	Laminas\Stdlib\ArrayObject {#1507}
SessionHelper	Laminas\Stdlib\ArrayObject {#1668}

Server/Request Data

Key	Value
REDIRECT_SCRIPT_URL	"/Record/dun.52184/Details"
REDIRECT_SCRIPT_URI	"http://vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar/Record/dun.52184/Details"
REDIRECT_VUFIND_ENV	"development"
REDIRECT_VUFIND_LOCAL_DIR	"/usr/local/vufind/local"
REDIRECT_STATUS	"200"
SCRIPT_URL	"/Record/dun.52184/Details"
SCRIPT_URI	"http://vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar/Record/dun.52184/Details"
VUFIND_ENV	"development"
VUFIND_LOCAL_DIR	"/usr/local/vufind/local"
HTTP_ACCEPT	"/"
HTTP_USER_AGENT	"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
HTTP_COOKIE	"language=es; VUFIND_SESSION=2nrpb7spfu1shlvt6ue946gt7b; ui=standard"
HTTP_ACCEPT_ENCODING	"gzip, br, zstd, deflate"
HTTP_HOST	"vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar"
HTTP_VIA	"1.1 squid-proxy-5b5d847c96-wfqzm (squid/6.10)"
HTTP_X_FORWARDED_FOR	"10.1.54.192"
HTTP_CACHE_CONTROL	"max-age=259200"
HTTP_CONNECTION	"keep-alive"
PATH	"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
SERVER_SIGNATURE	"<address>Apache/2.4.52 (Ubuntu) Server at vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar Port 80</address>\n"
SERVER_SOFTWARE	"Apache/2.4.52 (Ubuntu)"
SERVER_NAME	"vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar"
SERVER_ADDR	"172.17.0.170"
SERVER_PORT	"80"
REMOTE_ADDR	"216.73.216.32"
DOCUMENT_ROOT	"/usr/local/vufind/public"
REQUEST_SCHEME	"http"
CONTEXT_PREFIX	""
CONTEXT_DOCUMENT_ROOT	"/usr/local/vufind/public"
SERVER_ADMIN	"webmaster@bibliotecas.unlp.edu.ar"
SCRIPT_FILENAME	"/usr/local/vufind/public/index.php"
REMOTE_PORT	"61139"
REDIRECT_URL	"/Record/dun.52184/Details"
GATEWAY_INTERFACE	"CGI/1.1"
SERVER_PROTOCOL	"HTTP/1.1"
REQUEST_METHOD	"GET"
QUERY_STRING	""
REQUEST_URI	"/Record/dun.52184/Details"
SCRIPT_NAME	"/index.php"
PHP_SELF	"/index.php"
REQUEST_TIME_FLOAT	1749544949.6426
REQUEST_TIME	1749544949

Environment Variables empty

Registered Handlers

0. Whoops\Handler\PrettyPageHandler

Environment & details:

GET Data empty

POST Data empty

Files empty

Key	Value
language	"es"
VUFIND_SESSION	"2nrpb7spfu1shlvt6ue946gt7b"
ui	"standard"

Session

Key	Value
__Laminas	array:2 [`"_REQUEST_ACCESS_TIME" => 1749544949.6533 "_VALID" => array:1 [ "Laminas\Session\Validator\Id" => "2nrpb7spfu1shlvt6ue946gt7b" ]`]
SessionState	Laminas\Stdlib\ArrayObject {#906}
FlashMessenger	Laminas\Stdlib\ArrayObject {#1507}
SessionHelper	Laminas\Stdlib\ArrayObject {#1668}

Server/Request Data

Key	Value
REDIRECT_SCRIPT_URL	"/Record/dun.52184/Details"
REDIRECT_SCRIPT_URI	"http://vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar/Record/dun.52184/Details"
REDIRECT_VUFIND_ENV	"development"
REDIRECT_VUFIND_LOCAL_DIR	"/usr/local/vufind/local"
REDIRECT_STATUS	"200"
SCRIPT_URL	"/Record/dun.52184/Details"
SCRIPT_URI	"http://vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar/Record/dun.52184/Details"
VUFIND_ENV	"development"
VUFIND_LOCAL_DIR	"/usr/local/vufind/local"
HTTP_ACCEPT	"/"
HTTP_USER_AGENT	"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
HTTP_COOKIE	"language=es; VUFIND_SESSION=2nrpb7spfu1shlvt6ue946gt7b; ui=standard"
HTTP_ACCEPT_ENCODING	"gzip, br, zstd, deflate"
HTTP_HOST	"vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar"
HTTP_VIA	"1.1 squid-proxy-5b5d847c96-wfqzm (squid/6.10)"
HTTP_X_FORWARDED_FOR	"10.1.54.192"
HTTP_CACHE_CONTROL	"max-age=259200"
HTTP_CONNECTION	"keep-alive"
PATH	"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin"
SERVER_SIGNATURE	"<address>Apache/2.4.52 (Ubuntu) Server at vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar Port 80</address>\n"
SERVER_SOFTWARE	"Apache/2.4.52 (Ubuntu)"
SERVER_NAME	"vufind10-pruebas.sigbunlp.bibliotecas.unlp.edu.ar"
SERVER_ADDR	"172.17.0.170"
SERVER_PORT	"80"
REMOTE_ADDR	"216.73.216.32"
DOCUMENT_ROOT	"/usr/local/vufind/public"
REQUEST_SCHEME	"http"
CONTEXT_PREFIX	""
CONTEXT_DOCUMENT_ROOT	"/usr/local/vufind/public"
SERVER_ADMIN	"webmaster@bibliotecas.unlp.edu.ar"
SCRIPT_FILENAME	"/usr/local/vufind/public/index.php"
REMOTE_PORT	"61139"
REDIRECT_URL	"/Record/dun.52184/Details"
GATEWAY_INTERFACE	"CGI/1.1"
SERVER_PROTOCOL	"HTTP/1.1"
REQUEST_METHOD	"GET"
QUERY_STRING	""
REQUEST_URI	"/Record/dun.52184/Details"
SCRIPT_NAME	"/index.php"
PHP_SELF	"/index.php"
REQUEST_TIME_FLOAT	1749544949.6426
REQUEST_TIME	1749544949

Environment Variables empty

Registered Handlers

0. Whoops\Handler\PrettyPageHandler

Non-interference for a typed assembly language

MARC

Ejemplares similares

Environment & details:

Environment & details: