Implementing Security Via Modern Programming Languages
نویسنده
چکیده
Security topics in all areas are a pressing need for Computer Science instructors. This paper provides a survey of security features in modern programming languages. We present the role that type safety and capabilities provide for the building of secure systems, and how language systems allow designers to model security issues that once were part-and-parcel of Operating Systems, or that can not be modeled by such.
منابع مشابه
Secure Implementation of Cryptographic Protocols: A Case Study of Mutual Distrust
Security protocols are critical for protecting modern communication infrastructures and are therefore subject to thorough analysis. However practical implementations of these protocols lack the same level of attention and thus may be more exposed to attacks. This paper discusses security assurance provided by security-typed languages when implementing cryptographic protocols. Our results are ba...
متن کاملDynamic Aspect-Oriented Security Policy Enforcement
There are many approaches to utilizing aspect-oriented (AO) languages and techniques for the purpose of introducing security into applications. The cross-cutting nature of security has been well documented and therefore the benefit of implementing security using AO techniques logically follows. Authentication, authorization, auditing, logging, etc. are obvious activities that can easily be intr...
متن کاملMemory Segmentation to Support Secure Applications
Current CPU architectures provide only weak support for software segmentation, a key underpinning for software security techniques such as sandboxing, managed languages, and static analysis. Because hardware memory segmentation is relevant mainly in the program abstraction its support has been deemphasized in modern operating systems, yet modern hardware requires operating system support to use...
متن کاملSecurity-Typed Languages for Implementation of Cryptographic Protocols: A Case Study
In Proc. of ESORICS 2005, Milan, Italy, Sept. 12-14, 2005. LNCS. © Springer-Verlag 2005. Abstract. Security protocols are critical for protecting modern communication infrastructures and are therefore subject to thorough analysis. However practical implementations of these protocols lack the same level of attention and thus may be more exposed to attacks. This paper discusses security assurance...
متن کاملSecure Systems
Secure foundations for systems design Systems designers typically develop secure systems architectures at higher levels than the programming-language level. While specification languages such as Unified Modeling Language (UML) provide a way to express higher levels of system abstraction, the principal contribution of programming languages to systems security is lowand intermediate-level support...
متن کامل