Affiliation:
1. IMDEA Software Institute
2. IMDEA Software Institute and Universidad Politécnica de Madrid
Abstract
A certificate is a mathematical object that can be used to establish that a piece of mobile code satisfies some security policy. In general, certificates cannot be generated automatically. There is thus an interest in developing methods to reuse certificates generated for source code to provide strong guarantees of the compiled code correctness. Certificate translation is a method to transform certificates of program correctness along semantically justified program transformations. These methods have been developed in previous work, but they were strongly dependent on particular programming and verification settings. This article provides a more general development in the setting of abstract interpretation, showing the scalability of certificate translation.
Funder
Spanish project
Madrid Regional project
Seventh Framework Programme
Publisher
Association for Computing Machinery (ACM)
Reference51 articles.
1. Albert E. Puebla G. and
Hermenegildo M. V
.
2005
. Abstraction-carrying code. In Proceedings of the 11th International Conference on Logic for Programming Artificial Intelligence and Reasoning. F. and A. Voronkov Eds. Lecture Notes in Computer Science vol.
3452 Springer-Verlag 380--397. Albert E. Puebla G. and Hermenegildo M. V. 2005. Abstraction-carrying code. In Proceedings of the 11th International Conference on Logic for Programming Artificial Intelligence and Reasoning . F. and A. Voronkov Eds. Lecture Notes in Computer Science vol. 3452 Springer-Verlag 380--397.
2. Appel A. W. and Felten E. W. 2001. Models for security policies in proof-carrying code. Tech. rep. TR-636-01 Princeton University. Appel A. W. and Felten E. W. 2001. Models for security policies in proof-carrying code. Tech. rep. TR-636-01 Princeton University.
3. A Program Logic for Bytecode
4. Barnett M. Leino K. R. M. and
Schulte W
.
2005
. The Spec# programming system: An overview. In Proceedings of the International Workshop on Construction and Analysis of Safe Secure and Interoperable Smart Devices (CASSIS’04). G. Barthe L. Burdy M. Huisman J.-L. Lanet and T. Muntean Eds. Lecture Notes in Computer Science Series vol.
3362 Springer-Verlag 151--171. 10.1007/978-3-540-30569-9_3 Barnett M. Leino K. R. M. and Schulte W. 2005. The Spec# programming system: An overview. In Proceedings of the International Workshop on Construction and Analysis of Safe Secure and Interoperable Smart Devices (CASSIS’04) . G. Barthe L. Burdy M. Huisman J.-L. Lanet and T. Muntean Eds. Lecture Notes in Computer Science Series vol. 3362 Springer-Verlag 151--171. 10.1007/978-3-540-30569-9_3
Cited by
2 articles.
订阅此论文施引文献
订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献
1. Verified Translation Validation of Static Analyses;2017 IEEE 30th Computer Security Foundations Symposium (CSF);2017-08
2. Witnessing Program Transformations;Static Analysis;2013