Secure refactoring with Java information flow
Conference paper
Helke, S., Kammueller, F. and Probst, C. 2016. Secure refactoring with Java information flow. 10th International Workshop on Data Privacy Management (DPM 2015). Vienna, Austria 21 - 22 Sep 2015 Springer. pp. 264-272 https://doi.org/10.1007/978-3-319-29883-2_19
Type | Conference paper |
---|---|
Title | Secure refactoring with Java information flow |
Authors | Helke, S., Kammueller, F. and Probst, C. |
Abstract | Refactoring means that a program is changed without changing its behaviour from an observer’s point of view. Does the change of behaviour also imply that the security of the program is not affected by the changes? Using Myers and Liskov’s distributed information flow control model DLM and its Java implementation Jif, we explore this question practically on common patterns of Refactoring as known from Fowler. We first illustrate on an example the “Extract method” refac- toring and how it can endanger confidentiality. We then show how to construct a secure version of this major refactoring pattern by employing Jif to control information flows. Finally, we can show that security leaks as encountered at the outset are not possible anymore. |
Conference | 10th International Workshop on Data Privacy Management (DPM 2015) |
Page range | 264-272 |
ISSN | 0302-9743 |
ISBN | |
Hardcover | 9783319298832 |
Publisher | Springer |
Publication dates | |
04 Feb 2016 | |
Publication process dates | |
Deposited | 11 Sep 2015 |
Accepted | 15 Aug 2015 |
Output status | Published |
Additional information | Paper published as a chapter in: Data Privacy Management, and Security Assurance, Volume 9481 of the series Lecture Notes in Computer Science pp 264-272 |
Digital Object Identifier (DOI) | https://doi.org/10.1007/978-3-319-29883-2_19 |
Language | English |
Book title | Data Privacy Management, and Security Assurance: 10th International Workshop, DPM 2015, and 4th International Workshop, QASA 2015, Vienna, Austria, September 21-22, 2015. Revised Selected Papers |
https://repository.mdx.ac.uk/item/85w45
43
total views0
total downloads1
views this month0
downloads this month