kirancodes.me
To Proof Maintenance & Beyond!
ICSE 2009

Modular string-sensitive permission analysis with demand-driven precision

Emmanuel Geay, Marco Pistoia, Takaaki Tateishi, Barbara G. Ryder, Julian Dolby

DOI 10.1109/icse.2009.5070519dblp

Abstract

In modern software systems, programs are obtained by dynamically assembling components. This has made it necessary to subject component providers to access-control restrictions. What permissions should be granted to each component? Too few permissions may cause run-time authorization failures, too many constitute a security hole. We have designed and implemented a composite algorithm for precise static permission analysis for Java and the CLR. Unlike previous work, the analysis is modular and fully integrated with a novel slicing-based string analysis that is used to statically compute the string values defining a permission and disambiguate permission propagation paths. The results of our research prototype on production-level Java code support the effectiveness, practicality, and precision of our techniques, and show outstanding improvement over previous work.

BibTeX
@inproceedings{Geay-al:ICSE09,
  author    = {Emmanuel Geay and
               Marco Pistoia and
               Takaaki Tateishi and
               Barbara G. Ryder and
               Julian Dolby},
  title     = {Modular string-sensitive permission analysis with demand-driven precision},
  booktitle = {ICSE},
  pages     = {177--187},
  publisher = {{IEEE}},
  year      = {2009},
}

Related papers