A progress - sensitive ow - sensitive inlined information - ow control monitor

We present a novel progress-sensitive, ow-sensitive hybrid informationow control monitor for an imperative interactive language. Progress-sensitive informationow control is a strong information security guarantee which ensures that a program's progress (or lack of) does not leak information. Flow-sensitivity means that this strong security guarantee is enforced fairly precisely: we track information ow according to the source of information and not to an a priori given variable security level. We illustrate our approach on an imperative interactive language. Our hybrid monitor is inlined: source programs are translated, by a type-based analysis, into a target language that supports dynamic security levels. A key bene t of this is that the resulting monitored program is amenable to standard optimization techniques such as partial evaluation.