Blog Tag Search

The Decentralized Label Model

23rd May 2008

While programming languages provide support for encapsulation and basic access control there are rarely methods in place to mediate how data flows around an application. This is essential to ensuring that a system does not suffer from information leaks. The Decentralized Label Model and Java Information Flow framework approach this problem by providing a means of statically checking the flow of information around an application, based on policies associated with variables.

In this, the first in a two part series on controlling information flow, we look at the problem of information flow control and how the Decentralized Label Model can be used to minimise leaks.