English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

Software testing is the most commonly used technique in the industry tocertify the correctness of software systems. This includes security propertieslike access control and data confidentiality. However, information flow controland the detection of information leaks using tests is a demanding task withoutthe use of specialized monitoring and assessment tools.  In this paper, we tackle the challenge of dynamically tracking informationflow in third-party Java-based applications using dependent information flowcontrol. Dependent security labels increase the expressiveness of traditionalinformation flow control techniques by allowing to parametrize labels withcontext-related information and allowing for the specification of more detailedand fine-grained policies. Instead of the fixed security lattice used intraditional approaches that defines a fixed set of security compartments,dependent security labels allow for a dynamic lattice that can be extended atruntime, allowing for new security compartments to be defined using contextvalues.  We present a specification and instrumentation approach for rewriting JVMcompiled code with in-lined reference monitors. To illustrate the proposedapproach we use an example and a working prototype, SNITCH. SNITCH operatesover the static single assignment language Shimple, an intermediaterepresentation for Java bytecode used in the SOOT framework.

SNITCH: Dynamic Dependent Information Flow Analysis for Independent Java Bytecode