A Dynamic Label Checking Approach for Information Flow Control in Web Services

Zahir Tari, Peter Bertok and Dusan Simic
Additional contact information
Zahir Tari: RMIT University, Australia
Peter Bertok: RMIT University, Australia
Dusan Simic: RMIT University, Australia

International Journal of Web Services Research (IJWSR), 2006, vol. 3, issue 1, 1-28

Abstract: Information Flow Control (IFC) is a method of enforcing confidentiality by using labels, data structures for specifying security classifications. IFC is used in programming languages to monitor procedures in an attempt to detect and prevent information leakage. While it ensures greater security, IFC excessively restricts flow of information. This paper presents a model of information flow control using semi-discretionary label structures. We propose a set of rules that not only increases the flexibility of IFC but also defines labels as a practical component of a security system. We propose a dynamic approach using a centralized model for dynamic label checking and verify the proposed model using theoretical proofs.

Date: 2006
References: Add references at CitEc
Citations:

Downloads: (external link)
https://services.igi-global.com/resolvedoi/resolve ... 4018/jwsr.2006010101 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jwsr00:v:3:y:2006:i:1:p:1-28

Access Statistics for this article

International Journal of Web Services Research (IJWSR) is currently edited by Liang-Jie Zhang

More articles in International Journal of Web Services Research (IJWSR) from IGI Global
Bibliographic data for series maintained by Journal Editor ().