Aura: A Programming Language with Authorization and Audit
Duration: 1 hour 5 mins 24 secs
Share this media item:
Embed this media item:
Embed this media item:
About this item
Description: | http://www.talks.cam.ac.uk/talk/index/22090 |
---|
Created: | 2010-03-12 11:39 |
---|---|
Collection: | Computer Laboratory Wednesday Seminars |
Publisher: | University of Cambridge |
Copyright: | University of Cambridge |
Language: | eng (English) |
Abstract: | Existing mechanisms for authorizing and auditing the flow of information in networked computer systems are insufficient to meet the security requirements of high-assurance software systems. Current best practices typically rely on operating-system provided file permissions for authorization and an ad-hoc combination of OS and network-level (e.g. firewall-level) logging to generate audit trails.
This talk will describe work on a security-oriented programming language called Aura that attempts to address this problem of auditable information flows in a more principled way. Aura supports a built-in notion of principal and its type system incorporates ideas from authorization logic and information-flow constraints. These features, together with the Aura run-time system, enforce strong information-flow policies while generating good audit trails. These audit trails record access-control decisions (such as uses of downgrading or declassification) that influence how information flows through the system. Aura’s programming model is intended to smoothly integrate information-flow and access control constraints with the cryptographic enforcement mechanisms necessary in a distributed computing environment. This is joint work with Jeff Vaughan, Limin Jia, Karl Mazurak, Jianzhou Zhou, Joseph Schorr, and Luke Zarko. |
---|
Available Formats
Format | Quality | Bitrate | Size | |||
---|---|---|---|---|---|---|
MPEG-4 Video | 480x360 | 1.84 Mbits/sec | 904.33 MB | View | Download | |
WebM | 480x360 | 375.08 kbits/sec | 178.57 MB | View | Download | |
Flash Video | 480x360 | 806.3 kbits/sec | 386.81 MB | View | Download | |
Flash Video | 320x240 | 437.02 kbits/sec | 209.66 MB | View | Download | |
iPod Video | 480x360 | 505.24 kbits/sec | 242.38 MB | View | Download | |
iPod Video | 320x240 | 472.62 kbits/sec | 226.73 MB | View | Download | |
MP3 | 44100 Hz | 125.0 kbits/sec | 59.76 MB | Listen | Download | |
Auto * | (Allows browser to choose a format it supports) |