Security properties of typed applets

Xavier Leroy (1) , François Rouaix (1)

1 CRISTAL - Typed programming, modularity and compilation

This paper formalizes the folklore result that strongly-typed applets are more secure than untyped ones. We formulate and prove several security properties that all well-typed applets possess, and identify sufficient conditions for the applet execution environment to be safe, such as procedural encapsulation, type abstraction, and systematic type-based placement of run-time checks. These results are a first step towards formal techniques for developing and validating safe execution environments for applets.

Domaines: Langage de programmation [cs.PL]

Xavier Leroy, François Rouaix. Security properties of typed applets. Jan Vitek; Christian D. Jensen Secure Internet Programming - Security issues for Mobile and Distributed Objects, 1603, Springer, pp.147-182, 1999, LNCS, 978-3-540-66130-6. ⟨10.1007/3-540-48749-2_7⟩. ⟨hal-01499957⟩