Using object capabilities and effects to build an authority-safe module system: poster

Darya Melicher, Yangqingwei Shi, Valerie Zhao, Alex Potanin, Jonathan Aldrich

Research output: Chapter in Book/Report/Conference proceedingMeeting Abstractpeer-review

1 Citation (Scopus)

Abstract

The principle of least authority states that each component of a software system must have only the authority necessary for its execution and nothing else. This principle is a cornerstone of the security of software applications, but it is difficult to enforce in practice. Current programming languages, as well as non-linguistic approaches, do not provide adequate control over the authority of untrusted modules [1, 5]. To fill this gap, we designed and implemented a capability-based module system that facilitates controlling the security capabilities of software modules [2]. Furthermore, we are currently working on augmenting our module system with an effect system to make our design authority-safe. Our approach simplifies the process of ensuring that a software system maintains the principle of least authority, and also allows for attenuation of module authority [3]. Our design is implemented as part of the Wyvern programming language [4].

Original languageEnglish
Title of host publicationProceedings of the 5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security, HoTSoS 2018
PublisherAssociation for Computing Machinery (ACM)
Number of pages1
ISBN (Electronic)9781450364553
DOIs
Publication statusPublished - 10 Apr 2018
Externally publishedYes
Event5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security, HoTSoS 2018 - Raleigh, United States
Duration: 10 Apr 201811 Apr 2018

Publication series

NameACM International Conference Proceeding Series

Conference

Conference5th Annual Symposium and Bootcamp on Hot Topics in the Science of Security, HoTSoS 2018
Country/TerritoryUnited States
CityRaleigh
Period10/04/1811/04/18

Fingerprint

Dive into the research topics of 'Using object capabilities and effects to build an authority-safe module system: poster'. Together they form a unique fingerprint.

Cite this