Authors: Dezani-Ciancaglini, Mariangiola
Ghilezan, Silvia 
Pantović, Jovanka
Varacca, Daniele
Title: Security types for dynamic web data
Journal: Theoretical Computer Science
Volume: 402
Issue: 2-3
First page: 156
Last page: 171
Issue Date: 8-Aug-2008
Rank: M22
ISSN: 0304-3975
DOI: 10.1016/j.tcs.2008.04.032
We describe a type system for the X d π calculus of Gardner and Maffeis. An X d π-network is a network of locations, where each location consists of both a data tree (which contains scripts and pointers to nodes in trees at different locations) and a process, for modeling process interaction, process migration and interaction between processes and data. Our type system is based on types for locations, data and processes, expressing security levels. A tree can store data of different security level, independently from the security level of the enclosing location. The access and mobility rights of a process depend on the security level of the "source" location of the process itself, i.e. of the location where the process was in the initial network or where the process was created by the activation of a script. The type system enjoys type preservation under reduction (subject reduction). In consequence of subject reduction we prove the following security properties. In a well-typed X d π-network, a process P whose source location is of level h can copy data of security level at most h and update data of security level less than h. Moreover, the process P can only communicate data and go to locations of security level equal or less than h.
Keywords: Dynamic web data | Pi-calculus | Security types | XML
Publisher: Elsevier
Project: FP6-2004-510996 Coordination Action TYPES
GLORA 144029 of MSEP
ANR project “ParSec” ANR-06-SETI-010-02
MMIT 1438 of PSNTR

Show full item record


checked on May 18, 2024

Page view(s)

checked on May 9, 2024

Google ScholarTM




Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.