Jifclipse: Development tools for security-typed languages

Boniface Hicks, Dave King, Patrick McDaniel

Research output: Chapter in Book/Report/Conference proceedingConference contribution

5 Scopus citations

Abstract

Security-typed languages such as Jif require the programmer to label variables with information flow security policies as part of application development. The compiler then flags errors wherever information leaks may occur. Resolving these information leaks is a critical task in security-typed language application development. Unfortunately, because information flows can be quite subtle, simple error messages tend to be insufficient for finding and resolving the source of information leaks; more sophisticated development tools are needed for this task. To this end we provide a set of principles to guide the development of such tools. Furthermore, we implement a subset of these principles in an integrated development environment (IDE) for Jif, called Jifclipse, which is built on the Eclipse extensible development platform. Our plug-in provides a Jif programmer with additional tools to view hidden information generated by a Jif compilation, to suggest fixes for errors, and to get more specific information behind an error message. Better development tools are essential for making security-typed application development practical; Jifclipse is a first step in this process.

Original languageEnglish (US)
Title of host publicationPLAS'07 - Proceedings of the 2007 ACM SIGPLAN Workshop on Programming Languages and Analysis for Security
Pages1-10
Number of pages10
DOIs
StatePublished - Nov 30 2007
EventPLAS'07 - 2007 ACM SIGPLAN Workshop on Programming Languages and Analysis for Security - San Diego, CA, United States
Duration: Jun 14 2007Jun 14 2007

Publication series

NamePLAS'07 - Proceedings of the 2007 ACM SIGPLAN Workshop on Programming Languages and Analysis for Security

Other

OtherPLAS'07 - 2007 ACM SIGPLAN Workshop on Programming Languages and Analysis for Security
CountryUnited States
CitySan Diego, CA
Period6/14/076/14/07

All Science Journal Classification (ASJC) codes

  • Software

Fingerprint Dive into the research topics of 'Jifclipse: Development tools for security-typed languages'. Together they form a unique fingerprint.

Cite this