BibTex format
@inproceedings{Drossopoulou:2013,
author = {Drossopoulou, S and Noble, J},
title = {The Need for Capability Policies},
url = {http://types.cs.washington.edu/ftfjp2013/preprints/a6-Drossopoulou.pdf},
year = {2013}
}
Publications
Citation
RIS format (EndNote, RefMan)
TY - CPAPER
AB - The object-capability model is one of the industry standards adopted for the implementation of security policies for web-based software. Object-capabilities in various forms are supported by programming languages such as E, Joe-E, Newspeak, Grace, and the newer ver- sions of Javascript. Unfortunately, code written using capabilities tends to concentrate on the low-level mechanism rather than the high-level policy.In this position paper, we argue that current specification method- ologies cannot adequately capture all aspects of the capability poli- cies required to support object-capability systems. We outline inormally the features that such security policies should support, and we demonstrate (also informally) how we can reason that examples satisfy the capability policies.
AU - Drossopoulou,S
AU - Noble,J
PY - 2013///
TI - The Need for Capability Policies
UR - http://types.cs.washington.edu/ftfjp2013/preprints/a6-Drossopoulou.pdf
ER -