Title :
Flexible policy-directed code safety
Author :
Evans, David ; Twyman, Andrew
Author_Institution :
Lab. for Comput. Sci., MIT, Cambridge, MA, USA
Abstract :
The article introduces a new approach to code safety. We present Naccio, a system architecture that allows a large class of safety policies to be expressed in a general and platform-independent way. Policies are defined in terms of abstract resource manipulations. We describe mechanisms that can be used to efficiently and conveniently enforce these safety policies by transforming programs. We are developing implementations of Naccio that enforce policies on JavaVM classes and Win32 executables. We report on results using the JavaVM prototype
Keywords :
Java; safety-critical software; security of data; virtual machines; JavaVM classes; JavaVM prototype; Naccio; Win32 executables; abstract resource manipulations; flexible policy-directed code safety; safety policies; system architecture; Computer architecture; Computer science; Identity-based encryption; Java; Laboratories; National security; Operating systems; Prototypes; Safety;
Conference_Titel :
Security and Privacy, 1999. Proceedings of the 1999 IEEE Symposium on
Conference_Location :
Oakland, CA
Print_ISBN :
0-7695-0176-1
DOI :
10.1109/SECPRI.1999.766716
