Eliminating implicit information leaks by transformational typing and unification

Publikationstyp
Conference Paper
Date Issued
2005-07
Sprache
English
Author(s)
Köpf, Boris  
Mantel, Heiko 
TORE-URI
http://hdl.handle.net/11420/13957
First published in
Lecture notes in computer science  
Number in series
3866 LNCS
Start Page
47
End Page
62
Citation
Lecture Notes in Computer Science 3866 LNCS: 47-62 (2006)
Contribution to Conference
3rd International Workshop on Formal Aspects in Security and Trust, FAST 2005  
Publisher DOI
10.1007/11679219_5
Scopus ID
2-s2.0-33745678531
Publisher
Springer
Before starting the security analysis of an existing system, the most likely outcome is often already clear, namely that the system is not entirely secure. Modifying a program such that it passes the analysis is a difficult problem and usually left entirely to the programmer. In this article, we show that and how unification can be used to compute such program transformations. This opens a new perspective on the problem of correcting insecure programs. We demonstrate that integrating our approach into an existing transforming type system can also improve the precision of the analysis and the quality of the resulting programs
DDC Class
004: Informatik