A static secure flow analyzer for a subset of Java
By: James D. Harvey
Publisher: Naval Postgraduate School; Available from National Technical Information Service
Published: 1998
Place of publication: Monterey, Calif; Springfield, Va
Language: eng
Number of pages: 85
Description: As the number of computers and computer systems in existence has grown over the past few decades, we have      come to depend on them to maintain the security of private or sensitive information. The execution of a program      may cause leaks of private or sensitive information from the computer. Static secure flow analysis is an attempt to      detect these leaks prior to program execution. It is possible to analyze programs by hand, but this is often      impractical for large programs. A better approach is to automate the analysis, which is what this thesis explores.      We describe some previous research and give background information about secure flow analysis. A secure flow      analyzer is presented. It implements a secure flow type inference algorithm, for a subset of Java 1.0.2, using a      parser generator called Java Compiler Compiler (JavaCC). Semantic actions are inserted into a grammar      specification to perform the secure flow analysis on a given program.
Notes: Thesis advisor(s): Dennis M. Volpano.

"March 1998."

Thesis (M.S. Computer Science) Naval Postgraduate School, March 1998.

Includes bibliographical references (p. 31).

Approved for public release; distribution unlimited.

Also available online.

Mode of access: World Wide Web.

System requirements: Adobe Acrobat Reader 7.0.

US Navy (USN) author.

dk/dk cc:9116 7/23/98.