Laminar swMATH ID: 23077 Software Authors: Roy, I.; Porter, D. E.; Bond, M. D.; McKinley, K. S.; Witchel, E. Description: Laminar: practical fine-grained decentralized information flow control. Decentralized information flow control (DIFC) is a promising model for writing programs with powerful, end-to-end security guarantees. Current DIFC systems that run on commodity hardware can be broadly categorized into two types: language-level and operating system-level DIFC. Language level solutions provide no guarantees against security violations on system resources, like files and sockets. Operating system solutions can mediate accesses to system resources, but are inefficient at monitoring the flow of information through fine-grained program data structures. This paper describes Laminar, the first system to implement decentralized information flow control using a single set of abstractions for OS resources and heap-allocated objects. Programmers express security policies by labeling data with secrecy and integrity labels, and then access the labeled data in lexically scoped security regions. Laminar enforces the security policies specified by the labels at runtime. Laminar is implemented using a modified Java virtual machine and a new Linux security module. This paper shows that security regions ease incremental deployment and limit dynamic security checks, allowing us to retrofit DIFC policies on four application case studies. Replacing the applications’ ad-hoc security policies changes less than 10 Homepage: https://dl.acm.org/citation.cfm?id=1542484 Related Software: JFlow; JRIF; Jif; Paragon; SGX; Privtrans; Fable; Moat; EROS; VC3; Merlin; F*; LLVM; Aglet; Haskell Cited in: 5 Documents all top 5 Cited by 14 Authors 2 Bhardwaj, Chandrika 2 Prasad, Sanjiva 1 Arden, Owen 1 Harris, William R. 1 Jha, Somesh 1 Kozyri, Elisavet 1 Mazières, David 1 Mitchell, John C. 1 Myers, Andrew C. 1 Reps, Thomas W. 1 Russo, Alejandro 1 Schneider, Fred B. 1 Seshia, Sanjit Arunkumar 1 Stefan, Deian Cited in 3 Serials 1 Formal Methods in System Design 1 Journal of Functional Programming 1 Journal of Logical and Algebraic Methods in Programming Cited in 2 Fields 5 Computer science (68-XX) 2 Order, lattices, ordered algebraic structures (06-XX) Citations by Year