Information flow control using the Java Virtual Machine Tool Interface (JVMTI)

Jason Howarth, Irfan Altas, Barney Dalgarno

Research output: A Conference proceeding or a Chapter in BookConference contributionpeer-review

2 Citations (Scopus)

Abstract

We present an information flow control (IFC) system which monitors information leakage in single-threaded Java programs. Our implementation uses the Java Virtual Machine Tool Interface (JVMTI) and adapts the algorithms of Le Guernic et al. [1] for this purpose. We also offer a generic rule set for enforcing IFC. One advantage of our approach is that it is dynamic, so that we are only concerned with the security of the current execution of a program, not all possible executions. Our system tracks flow at the level of primitive Java fields, allowing precise control over the information that is monitored. Further, no modifications to the Java Virtual Machine (JVM) are needed for our system to work.

Original languageEnglish
Title of host publicationARES 2010 - 5th International Conference on Availability, Reliability, and Security
EditorsA Min Tjoa, Gerald Quirchmayr
Place of PublicationUnited States
PublisherIEEE, Institute of Electrical and Electronics Engineers
Pages689-695
Number of pages7
ISBN (Print)9781424458790
DOIs
Publication statusPublished - 2010
Externally publishedYes
Event5th International Conference on Availability, Reliability, and Security, ARES 2010 - Krakow, Poland
Duration: 15 Feb 201018 Feb 2010

Publication series

NameARES 2010 - 5th International Conference on Availability, Reliability, and Security

Conference

Conference5th International Conference on Availability, Reliability, and Security, ARES 2010
Country/TerritoryPoland
CityKrakow
Period15/02/1018/02/10

Fingerprint

Dive into the research topics of 'Information flow control using the Java Virtual Machine Tool Interface (JVMTI)'. Together they form a unique fingerprint.

Cite this