ASSOCIATION-BASED INFORMATION FLOW CONTROL AMONG OBJECTS AND FOREIGN OBJECTS

• Main Authors: Ying-Kai Wen, 文盈凱
• Other Authors: Shih-Chien Chou
• Format: Others
• Language: en_US
• Published: 2003
• Online Access: http://ndltd.ncl.edu.tw/handle/22713502714726305068

碩士 === 國立東華大學 === 資訊工程學系 === 91 === Abstract This thesis proposes an information flow control model to prevent information leakage within object-oriented systems. Since objects may be dynamically instantiated during the execution of an object-oriented system, controlling information flows among objects is difficult. Our research revealed that associations are useful in the control. The proposed model thus uses associations as the basis for information flow control. The model is named ABIFC (association-based information flow control). ABIFC offers the following useful features: (a) precisely controlling information flows among objects, (b) controlling foreign objects, (c) detailing the control granularity to variables, (d) allowing purpose-oriented method invocation, (e) allowing information declassification, (f) controlling write access precisely, (g) applicable to existing applications easily, and (h) avoiding Trojan horse. We embedded ABIFC in JAVA to produce the language AbFlow (association-based flow), with which secure applications can be developed. The implementation of AbFlow’s execution environment is also presented in this thesis.