Security Type Error Diagnosis for Higher-Order Polymorphic Languages

Jeroen Weijers; J Hage; Stefan Holdermans

doi:10.1016/j.scico.2014.03.011

Security Type Error Diagnosis for Higher-Order Polymorphic Languages

Jeroen Weijers, J Hage, Stefan Holdermans

Research output: Contribution to journal › Article › Academic › peer-review

Abstract

We combine the type error slicing and heuristics based approaches to type error diagnostic improvement within the context of type based security analysis on a let-polymorphic call by value lambda calculus extended with lists, pairs and the security specific constructs declassify and protect. We define and motivate four classes of heuristics that help diagnose inconsistencies among the constraints, and show their effect on a selection of security incorrect programs.

Original language	English
Pages (from-to)	200-218
Journal	Science of Computer Programming
Volume	95
Issue number	2
DOIs	https://doi.org/10.1016/j.scico.2014.03.011
Publication status	Published - Dec 2014

Keywords

Type-based program analysis
Security analysis
Error feedback

Access to Document

10.1016/j.scico.2014.03.011

Embargoed Document

18-main
Final published version, 352 KB
Embargo ends: 1/01/50

6 Citations
1 Conference contribution

Security Type Error Diagnosis for Higher-Order Polymorphic Languages
Weijers, J., Hage, J. & Holdermans, S., 2013, Proceedings of the ACM SIGPLAN 2013 Workshop on Partial Evaluation and Program Manipulation (PEPM '13). Association for Computing Machinery, p. 3-12 10 p.
Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

Cite this

@article{5d59b8f5347647ff8987d3f9b561cf53,

title = "Security Type Error Diagnosis for Higher-Order Polymorphic Languages",

abstract = "We combine the type error slicing and heuristics based approaches to type error diagnostic improvement within the context of type based security analysis on a let-polymorphic call by value lambda calculus extended with lists, pairs and the security specific constructs declassify and protect. We define and motivate four classes of heuristics that help diagnose inconsistencies among the constraints, and show their effect on a selection of security incorrect programs.",

keywords = "Type-based program analysis, Security analysis, Error feedback",

author = "Jeroen Weijers and J Hage and Stefan Holdermans",

year = "2014",

month = dec,

doi = "10.1016/j.scico.2014.03.011",

language = "English",

volume = "95 ",

pages = "200--218",

journal = "Science of Computer Programming",

issn = "0167-6423",

publisher = "Elsevier",

number = "2",

}

TY - JOUR

T1 - Security Type Error Diagnosis for Higher-Order Polymorphic Languages

AU - Weijers, Jeroen

AU - Hage, J

AU - Holdermans, Stefan

PY - 2014/12

Y1 - 2014/12

N2 - We combine the type error slicing and heuristics based approaches to type error diagnostic improvement within the context of type based security analysis on a let-polymorphic call by value lambda calculus extended with lists, pairs and the security specific constructs declassify and protect. We define and motivate four classes of heuristics that help diagnose inconsistencies among the constraints, and show their effect on a selection of security incorrect programs.

AB - We combine the type error slicing and heuristics based approaches to type error diagnostic improvement within the context of type based security analysis on a let-polymorphic call by value lambda calculus extended with lists, pairs and the security specific constructs declassify and protect. We define and motivate four classes of heuristics that help diagnose inconsistencies among the constraints, and show their effect on a selection of security incorrect programs.

KW - Type-based program analysis

KW - Security analysis

KW - Error feedback

U2 - 10.1016/j.scico.2014.03.011

DO - 10.1016/j.scico.2014.03.011

M3 - Article

SN - 0167-6423

VL - 95

SP - 200

EP - 218

JO - Science of Computer Programming

JF - Science of Computer Programming

IS - 2

ER -

Security Type Error Diagnosis for Higher-Order Polymorphic Languages

Abstract

Keywords

Access to Document

Embargoed Document

Fingerprint

Research output

Security Type Error Diagnosis for Higher-Order Polymorphic Languages

Cite this