TY - GEN
T1 - Controlling data flow with a policy-based programming language for the web
AU - Sans, Thierry
AU - Cervesato, Iliano
AU - Hussein, Soha
PY - 2013
Y1 - 2013
N2 - It has become increasingly easy to write Web applications and other distributed programs by orchestrating invocations to remote third-party services. Increasingly, these third-party services themselves invoke other services and so on, making it difficult for the original application developer to anticipate where his/her data will end up. This may lead to privacy breaches or contractual violations. In this paper, we explore a simple distributed programming language that allows a web service provider to infer automatically where user data will travel to, and the developer to impose statically-checkable constraints on acceptable routes. For example, this may provide confidence that company data will not flow to a competitor, or that privacy-sensitive data goes through an anonymizer before being sent further out.
AB - It has become increasingly easy to write Web applications and other distributed programs by orchestrating invocations to remote third-party services. Increasingly, these third-party services themselves invoke other services and so on, making it difficult for the original application developer to anticipate where his/her data will end up. This may lead to privacy breaches or contractual violations. In this paper, we explore a simple distributed programming language that allows a web service provider to infer automatically where user data will travel to, and the developer to impose statically-checkable constraints on acceptable routes. For example, this may provide confidence that company data will not flow to a competitor, or that privacy-sensitive data goes through an anonymizer before being sent further out.
UR - http://www.scopus.com/inward/record.url?scp=84890874209&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=84890874209&partnerID=8YFLogxK
U2 - 10.1007/978-3-642-41488-6_15
DO - 10.1007/978-3-642-41488-6_15
M3 - Conference contribution
AN - SCOPUS:84890874209
SN - 9783642414879
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 215
EP - 230
BT - Secure IT Systems - 18th Nordic Conference, NordSec 2013, Proceedings
PB - Springer–Verlag
T2 - 18th Nordic Conference on Secure IT Systems, NordSec 2013
Y2 - 18 October 2013 through 21 October 2013
ER -