Matches in SemOpenAlex for { <https://semopenalex.org/work/W2900152012> ?p ?o ?g. }
- W2900152012 endingPage "30" @default.
- W2900152012 startingPage "1" @default.
- W2900152012 abstract "This paper presents LWeb, a framework for enforcing label-based, information flow policies in database-using web applications. In a nutshell, LWeb marries the LIO Haskell IFC enforcement library with the Yesod web programming framework. The implementation has two parts. First, we extract the core of LIO into a monad transformer (LMonad) and then apply it to Yesod’s core monad. Second, we extend Yesod’s table definition DSL and query functionality to permit defining and enforcing label-based policies on tables and enforcing them during query processing. LWeb’s policy language is expressive, permitting dynamic per-table and per-row policies. We formalize the essence of LWeb in the λ LWeb calculus and mechanize the proof of noninterference in Liquid Haskell. This mechanization constitutes the first metatheoretic proof carried out in Liquid Haskell. We also used LWeb to build a substantial web site hosting the Build it, Break it, Fix it security-oriented programming contest. The site involves 40 data tables and sophisticated policies. Compared to manually checking security policies, LWeb imposes a modest runtime overhead of between 2% to 21%. It reduces the trusted code base from the whole application to just 1% of the application code, and 21% of the code overall (when counting LWeb too)." @default.
- W2900152012 created "2018-11-16" @default.
- W2900152012 creator A5046625836 @default.
- W2900152012 creator A5059759222 @default.
- W2900152012 creator A5078144924 @default.
- W2900152012 date "2019-01-02" @default.
- W2900152012 modified "2023-09-26" @default.
- W2900152012 title "LWeb: information flow security for multi-tier web applications" @default.
- W2900152012 cites W1461884856 @default.
- W2900152012 cites W1606774834 @default.
- W2900152012 cites W1608712340 @default.
- W2900152012 cites W1613776191 @default.
- W2900152012 cites W1967845068 @default.
- W2900152012 cites W1969883639 @default.
- W2900152012 cites W1978267236 @default.
- W2900152012 cites W2005421574 @default.
- W2900152012 cites W2005525408 @default.
- W2900152012 cites W2009775190 @default.
- W2900152012 cites W2014950794 @default.
- W2900152012 cites W2027961147 @default.
- W2900152012 cites W2028705369 @default.
- W2900152012 cites W2033178475 @default.
- W2900152012 cites W2034527657 @default.
- W2900152012 cites W2045900383 @default.
- W2900152012 cites W2060710422 @default.
- W2900152012 cites W2061056245 @default.
- W2900152012 cites W2094873755 @default.
- W2900152012 cites W2100233145 @default.
- W2900152012 cites W2122049982 @default.
- W2900152012 cites W2129592257 @default.
- W2900152012 cites W2145653610 @default.
- W2900152012 cites W2158126684 @default.
- W2900152012 cites W2162283517 @default.
- W2900152012 cites W2166510103 @default.
- W2900152012 cites W2166743230 @default.
- W2900152012 cites W2171182387 @default.
- W2900152012 cites W2171239903 @default.
- W2900152012 cites W2267469130 @default.
- W2900152012 cites W2296133386 @default.
- W2900152012 cites W2307994931 @default.
- W2900152012 cites W2397565816 @default.
- W2900152012 cites W2538446731 @default.
- W2900152012 cites W2625599531 @default.
- W2900152012 cites W2751092273 @default.
- W2900152012 cites W2752188526 @default.
- W2900152012 cites W3024337755 @default.
- W2900152012 cites W3100118001 @default.
- W2900152012 cites W3125985216 @default.
- W2900152012 cites W4206358530 @default.
- W2900152012 cites W4238764625 @default.
- W2900152012 cites W4243963980 @default.
- W2900152012 cites W4300948847 @default.
- W2900152012 doi "https://doi.org/10.1145/3290388" @default.
- W2900152012 hasPublicationYear "2019" @default.
- W2900152012 type Work @default.
- W2900152012 sameAs 2900152012 @default.
- W2900152012 citedByCount "17" @default.
- W2900152012 countsByYear W29001520122019 @default.
- W2900152012 countsByYear W29001520122020 @default.
- W2900152012 countsByYear W29001520122021 @default.
- W2900152012 countsByYear W29001520122022 @default.
- W2900152012 countsByYear W29001520122023 @default.
- W2900152012 crossrefType "journal-article" @default.
- W2900152012 hasAuthorship W2900152012A5046625836 @default.
- W2900152012 hasAuthorship W2900152012A5059759222 @default.
- W2900152012 hasAuthorship W2900152012A5078144924 @default.
- W2900152012 hasBestOaLocation W29001520121 @default.
- W2900152012 hasConcept C111919701 @default.
- W2900152012 hasConcept C118615104 @default.
- W2900152012 hasConcept C154908896 @default.
- W2900152012 hasConcept C156772000 @default.
- W2900152012 hasConcept C199360897 @default.
- W2900152012 hasConcept C2777904410 @default.
- W2900152012 hasConcept C2778583558 @default.
- W2900152012 hasConcept C2780624054 @default.
- W2900152012 hasConcept C33923547 @default.
- W2900152012 hasConcept C33959348 @default.
- W2900152012 hasConcept C41008148 @default.
- W2900152012 hasConcept C42383842 @default.
- W2900152012 hasConcept C544833334 @default.
- W2900152012 hasConcept C77088390 @default.
- W2900152012 hasConceptScore W2900152012C111919701 @default.
- W2900152012 hasConceptScore W2900152012C118615104 @default.
- W2900152012 hasConceptScore W2900152012C154908896 @default.
- W2900152012 hasConceptScore W2900152012C156772000 @default.
- W2900152012 hasConceptScore W2900152012C199360897 @default.
- W2900152012 hasConceptScore W2900152012C2777904410 @default.
- W2900152012 hasConceptScore W2900152012C2778583558 @default.
- W2900152012 hasConceptScore W2900152012C2780624054 @default.
- W2900152012 hasConceptScore W2900152012C33923547 @default.
- W2900152012 hasConceptScore W2900152012C33959348 @default.
- W2900152012 hasConceptScore W2900152012C41008148 @default.
- W2900152012 hasConceptScore W2900152012C42383842 @default.
- W2900152012 hasConceptScore W2900152012C544833334 @default.
- W2900152012 hasConceptScore W2900152012C77088390 @default.
- W2900152012 hasFunder F4320306076 @default.
- W2900152012 hasFunder F4320332180 @default.
- W2900152012 hasIssue "POPL" @default.