- 1、本文档共31页,可阅读全部内容。
- 2、原创力文档(book118)网站文档一经付费(服务费),不意味着购买了该文档的版权,仅供个人/单位学习、研究之用,不得用于商业用途,未经授权,严禁复制、发行、汇编、翻译或者网络传播等,侵权必究。
- 3、本站所有内容均由合作方或网友上传,本站不对文档的完整性、权威性及其观点立场正确性做任何保证或承诺!文档内容仅供研究参考,付费前请自行鉴别。如您付费,意味着您自己接受本站规则且自行承担风险,本站不退款、不进行额外附加服务;查看《如何避免下载的几个坑》。如果您已付费下载过本站文档,您可以点击 这里二次下载。
- 4、如文档侵犯商业秘密、侵犯著作权、侵犯人身权等,请点击“版权申诉”(推荐),也可以打举报电话:400-050-0827(电话支持时间:9:00-18:30)。
查看更多
Information flow inference for ML
Information Flow Inference for ML
Vincent Simonet
INRIA Rocquencourt – Projet Cristal
MIMOSA
September 27, 2001
Information flow
account number
%%LL
LLL
LLL
LLL
LLL
LLL
L
bank
applet
yyyyyyyyyyy
E
EE
EE
EE
EE
EE
order
99rrrrrrrrrrrrrrrrrr
vendor
accountH × orderL→ bankH × vendorL
(?αβγδ) [α t β ≤ γ, β ≤ δ] accountα × orderβ→ bankγ × vendorδ
MIMOSA September 27, 2001
Information Flow Inference for ML (Vincent Simonet)
1
Non-interference
account number
%%LL
LLL
LLL
LLL
LLL
LLL
L
%%LL
LLL
LLL
LLL
LLL
LLL
L
bank
applet
EE
EE
EE
EE
EE
E
yyyyyyyyyyy
yyyyyyyyyyy
order
5=rrrrrrrrrrrrrrrrrr
rrrrrrrrrrrrrrrrrr
vendor
MIMOSA September 27, 2001
Information Flow Inference for ML (Vincent Simonet)
2
Existing systems
Dennis Volpano et Geoffrey Smith (1997)
Type system on a simple imperative langage. Restricted to the first order
and a finite number of global references.
Nevin Heintze et Jon G. Riecke SLam Calculus (1997)
λ-calculus with references and threads. The typing of mutable cells is not
fine enough. No security property is stated.
Andrew C. Myers JFlow (1999)
Information flow analysis for Java. This sytem is complex and not proven.
Steve Zdancewic et Andrew C. Myers (2001)
Analysis on a low-level language with linear continuations.
MIMOSA September 27, 2001
Information Flow Inference for ML (Vincent Simonet)
3
The ML language
Call-by-value λ-calculus with let-polymorphism
x k fun x→ e
e1 e2 let x = v in e bind x = e1 in e2
with references
ref e e1 := e2 ! e
and exceptions
ε e raise e e1 handle ε x e2 e1 handle x e2
MIMOSA September 27, 2001
Information Flow Inference for ML (Vincent Simonet)
4
The ML language
v-normal forms
v ::= x | k | fun x→ e | ε v
e ::= v v | ref v | v := v |! v | raise v | let x = v in e | E[v]
E ::= bind x = [ ] in e | [ ] handle ε x e | [ ] handle x e
Any source expression may be rewritten into a v-normal form provided an
evaluation strategy is fixed :
e1 e2 ?
{
bind x1 = e1 in (bind x2 = e2 in x1 x2) left to right eval.
bind x2 = e2 in (
您可能关注的文档
- HDL 2000机票打印机驱动安装.docx
- hdmi 7511W 芯片资料.pdf
- HDMI Marking Description.pdf
- Hearing Conversation Training Material.ppt
- HearNPVP26蛋白的结构解析.docx
- Heart rate variability in free diving athletes..pdf
- Heat Shock Protein 70 Is Induced in Mouse Human Colon.pdf
- Heat shock-mediated APX gene expression and protection against chilling injury in rice seedlings.pdf
- Heat shock proteins in whiteflies, an insect that accumulates sorbitol in response to heat stress..pdf
- Heat shock proteins in cancer.pdf
文档评论(0)