DeepAI AI Chat
Log In Sign Up

Polymorphic Relaxed Noninterference

by   Raimil Cruz, et al.

Information-flow security typing statically preserves confidentiality by enforcing noninterference. To address the practical need of selective and flexible declassification of confidential information, several approaches have developed a notion of relaxed noninterference, where security labels are either functions or types. The labels-as-types approach to relaxed noninterference supports expressive declassification policies, including recursive ones, via a simple subtyping-based ordering, and provides a local, modular reasoning principle. In this work, we extend this expressive declassification approach in order to support polymorphic declassification. First, we identify the need for bounded polymorphism through concrete examples. We then formalize polymorphic relaxed noninterference in a typed object-oriented calculus, using a step-indexed logical relation to prove that all well-typed terms are secure. Finally, we address the case of primitive types, which requires a form of ad-hoc polymorphism. Therefore, this work addresses practical hurdles to providing controlled and expressive declassification for the construction of information-flow secure systems.


page 1

page 2

page 3

page 4


Existential Types for Relaxed Noninterference

Information-flow security type systems ensure confidentiality by enforci...

SecRSL: Security Separation Logic for C11 Release-Acquire Concurrency (Extended version with technical appendices)

We present Security Relaxed Separation Logic (SecRSL), a separation logi...

PrideMM: A Solver for Relaxed Memory Models

Relaxed memory models are notoriously delicate. To ease their study, sev...

Controlled Martingale Problems And Their Markov Mimics

In this article we prove under suitable assumptions that the marginals o...

Secure Information Flow Connections

Denning's lattice model provided secure information flow analyses with a...

LWeb: Information Flow Security for Multi-tier Web Applications

This paper presents LWeb, a framework for enforcing label-based, informa...

Relaxing Local Robustness

Certifiable local robustness, which rigorously precludes small-norm adve...