Secure Refactoring with Java Information Flow

  • Refactoring means that a program is changed without changing its behaviour from an observer’s point of view. Does the change of behaviour also imply that the security of the program is not affected by the changes? Using Myers and Liskov’s distributed information flow control model DLM and its Java implementation Jif, we explore this question practically on common patterns of Refactoring as known from Fowler. We first illustrate on an example the “Extract method” refactoring and how it can endanger confidentiality. We then show how to construct a secure version of this major refactoring pattern by employing Jif to control information flows. Finally, we can show that security leaks as encountered at the outset are not possible anymore.

Export metadata

Additional Services

Search Google Scholar
Metadaten
Author: Steffen Helke, Florian Kammüller, Christian W. Probst
URL:http://link.springer.com/book/10.1007/978-3-319-29883-2
DOI:https://doi.org/10.1007/978-3-319-29883-2
ISBN:978-3-319-29882-5
ISBN:978-3-319-29883-2
Title of the source (English):Data Privacy Management, and Security Assurance, 10th International Workshop, DPM 2015, and 4th International Workshop, QASA 2015, Vienna, Austria, September 21-22, 2015
Publisher:Springer
Place of publication:Cham
Editor: Joaquin Garcia-Alfaro, Guillermo Navarro-Arribas, Alessandro AldiniORCiDGND, Fabio Martinelli, Neeraj Suri
Document Type:Conference Proceeding
Language:English
Year of publication:2015
Tag:Refactoring
First Page:264
Last Page:272
Series ; volume number:Lecture notes in computer science ; 9481
Faculty/Chair:Fakultät 1 MINT - Mathematik, Informatik, Physik, Elektro- und Informationstechnik / FG Sichere Softwaresysteme
Einverstanden ✔
Diese Webseite verwendet technisch erforderliche Session-Cookies. Durch die weitere Nutzung der Webseite stimmen Sie diesem zu. Unsere Datenschutzerklärung finden Sie hier.