Language-based information-flow security

摘要: Current standard security practices do not provide substantial assurance that the end-to-end behavior of a computing system satisfies important policies such as confidentiality. An confidentiality policy might assert secret input data cannot be inferred by an attacker through attacker's observations output; this regulates information flow. Conventional mechanisms access control and encryption directly address enforcement information-flow policies. Previously, promising new approach has been developed: use programming-language techniques for specifying enforcing In paper, we survey past three decades research on security, particularly focusing work uses static program analysis to enforce We give structured view in area identify some open challenges.