DocumentCode
2828804
Title
Flexible policy-directed code safety
Author
Evans, David ; Twyman, Andrew
Author_Institution
Lab. for Comput. Sci., MIT, Cambridge, MA, USA
fYear
1999
fDate
1999
Firstpage
32
Lastpage
45
Abstract
The article introduces a new approach to code safety. We present Naccio, a system architecture that allows a large class of safety policies to be expressed in a general and platform-independent way. Policies are defined in terms of abstract resource manipulations. We describe mechanisms that can be used to efficiently and conveniently enforce these safety policies by transforming programs. We are developing implementations of Naccio that enforce policies on JavaVM classes and Win32 executables. We report on results using the JavaVM prototype
Keywords
Java; safety-critical software; security of data; virtual machines; JavaVM classes; JavaVM prototype; Naccio; Win32 executables; abstract resource manipulations; flexible policy-directed code safety; safety policies; system architecture; Computer architecture; Computer science; Identity-based encryption; Java; Laboratories; National security; Operating systems; Prototypes; Safety;
fLanguage
English
Publisher
ieee
Conference_Titel
Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on
Conference_Location
Oakland, CA
ISSN
1081-6011
Print_ISBN
0-7695-0176-1
Type
conf
DOI
10.1109/SECPRI.1999.766716
Filename
766716
Link To Document