Information Flow Control in Object-Based Systems

Abstract

This paper proposes a model for information flow control in boject-based systems. The model details information flow control to the method level, with which attributes, arguments,and return values can be independently assigned security levels. This improves information flow control flexibility. Moreover, the model does not use classes to represent objects. Instead, it incorprates multiple labels to control information flows among objects, which may be dynamically instantiated during program ececution. We have used an example to show the necessity of information flow control among objects. Another feature provided by the model is that it allows purpose-oriented method invocation and, in the same time, avoids information leakage within an object.