Java and information flow is a secure programming language that expands Java by incorporating information flow control.
Jif, short for Java + information flow, is an innovative security-typed programming language that goes beyond the traditional Java language by incorporating Information Flow Control and Access Control mechanisms right from compile time through to run time. Users now have the ability to download the source code for the Jif compiler and run-time system. This security-typed programming language is written in Java and is built using the Polyglot extensible Java compiler framework.
One major advantage of Jif is that static information flow control protects the confidentiality and integrity of information handled by computing systems. By doing this, the compiler monitors the correspondence between information and the policies that restrict its use, thereby enforcing security properties within the system end-to-end. After information flow checks have been run within the Jif program, the Jif compiler then translates them to Java programs and uses an ordinary Java compiler to produce executable programs that are more secure than traditional ones.
Jif extends Java by introducing labels that define restrictions on how information might be used. For instance, consider the code fragment: int {Alice→Bob} x;, which declares that x is an int and also that the information contained in x is governed by a security policy. Here, the security policy dictates that Alice is the principal that controls the information and that Bob is permitted to view it. The policy {Alice←Bob} implies that Alice possesses the information and allows Bob to affect it. Utilizing label notations such as these, the Jif compiler can perform a thorough analysis of information flows within the program and determine whether the confidentiality and integrity of information is guaranteed.
One major advantage of Jif is that static information flow control protects the confidentiality and integrity of information handled by computing systems. By doing this, the compiler monitors the correspondence between information and the policies that restrict its use, thereby enforcing security properties within the system end-to-end. After information flow checks have been run within the Jif program, the Jif compiler then translates them to Java programs and uses an ordinary Java compiler to produce executable programs that are more secure than traditional ones.
Jif extends Java by introducing labels that define restrictions on how information might be used. For instance, consider the code fragment: int {Alice→Bob} x;, which declares that x is an int and also that the information contained in x is governed by a security policy. Here, the security policy dictates that Alice is the principal that controls the information and that Bob is permitted to view it. The policy {Alice←Bob} implies that Alice possesses the information and allows Bob to affect it. Utilizing label notations such as these, the Jif compiler can perform a thorough analysis of information flows within the program and determine whether the confidentiality and integrity of information is guaranteed.
What's New