Show simple item record

dc.contributor.authorPasquier, Thomas FJ-Men
dc.contributor.authorBacon, Jeanen
dc.contributor.authorShand, Brianen
dc.date.accessioned2014-09-19T14:30:20Z
dc.date.available2014-09-19T14:30:20Z
dc.date.issued2014-04-22en
dc.identifier.urihttps://www.repository.cam.ac.uk/handle/1810/245999
dc.description.abstractThis paper reports on our experience with providing Information Flow Control (IFC) as a library. Our aim was to support the use of an unmodified Platform as a Service (PaaS) cloud infrastructure by IFC-aware web applications. We discuss how Aspect Oriented Programming (AOP) overcomes the limitations of RubyTrack, our first approach. Although use of AOP has been mentioned as a possibility in past IFC literature we believe this paper to be the first illustration of how such an implementation can be attempted. We discuss how we built FlowR (Information Flow Control for Ruby), a library extending Ruby to provide IFC primitives using AOP via the Aquarium open source library. Previous attempts at providing IFC as a language extension required either modification of an interpreter or significant code rewriting. FlowR provides a strong separation between functional implementation and security constraints which supports easier development and maintenance; we illustrate with practical examples. In addition, we provide new primitives to describe IFC constraints on objects, classes and methods that, to our knowledge, are not present in related work and take full advantage of an object oriented language (OO language). The experience reported here makes us confident that the techniques we use for Ruby can be applied to provide IFC for any Object Oriented Program (OOP) whose implementation language has an AOP library.
dc.languageEnglishen
dc.language.isoenen
dc.publisherACM
dc.titleFlowR: aspect oriented programming for information flow control in rubyen
dc.typeConference Object
dc.description.versionThis is the final version published by ACM in Proceedings of the 13th international conference on Modularity (MODULARITY '14). ACM, New York, NY, USA, 37-48, available from the ACM Digital Library here: http://dl.acm.org/citation.cfm?doid=2577080.2577090.en
prism.endingPage48
prism.publicationDate2014en
prism.startingPage37
dc.rioxxterms.funderEngineering and Physical Sciences Research Council
dc.rioxxterms.projectidEP/K011510
rioxxterms.versionofrecord10.1145/2577080.2577090en
rioxxterms.licenseref.urihttp://www.rioxx.net/licenses/all-rights-reserveden
rioxxterms.licenseref.startdate2014-04-22en
rioxxterms.typeConference Paper/Proceeding/Abstracten
pubs.funder-project-idEPSRC (EP/K011510/1)


Files in this item

Thumbnail

This item appears in the following Collection(s)

Show simple item record