TY - GEN
T1 - Interprocedural information flow analysis of XML processors
AU - Seidl, Helmut
AU - Kovács, Máté
N1 - Funding Information:
This work was partially supported by the German Research Foundation (DFG) under the project SpAGAT (grant no. SE 551/14-2) in the priority program “Reliably Secure Software Systems – RS3”.
PY - 2014
Y1 - 2014
N2 - A crucial issue when providing publicly accessible web services is that sensitive data should only be accessible by authorized users. Accessibility of data within an application or information flow can conveniently be formalized as a 2-hyperproperty of a program. Here, we present a technique to interprocedurally analyze information flow in XML processors. Our approach is based on general techniques for program matching, and relational abstract interpretation of the resulting 2-programs. In case of XML processors, the abstract relational semantics then can be practically analyzed by means of finite tree automata.
AB - A crucial issue when providing publicly accessible web services is that sensitive data should only be accessible by authorized users. Accessibility of data within an application or information flow can conveniently be formalized as a 2-hyperproperty of a program. Here, we present a technique to interprocedurally analyze information flow in XML processors. Our approach is based on general techniques for program matching, and relational abstract interpretation of the resulting 2-programs. In case of XML processors, the abstract relational semantics then can be practically analyzed by means of finite tree automata.
UR - http://www.scopus.com/inward/record.url?scp=84898061698&partnerID=8YFLogxK
U2 - 10.1007/978-3-319-04921-2_4
DO - 10.1007/978-3-319-04921-2_4
M3 - Conference contribution
AN - SCOPUS:84898061698
SN - 9783319049205
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 34
EP - 61
BT - Language and Automata Theory and Applications - 8th International Conference, LATA 2014, Proceedings
T2 - 8th International Conference on Language and Automata Theory and Applications, LATA 2014
Y2 - 10 March 2014 through 14 March 2014
ER -