JGS: Gradual Security Types for Java

Summary

A research project with the goal to allow gradual integration of security types for the sequential fragment of Java

This project is work in progress. Currently, it consists of the following sub-projects (which are not really documented yet):

DynamicAnalyzer: an implementation of dynamic information flow control, based on the no-sensitive-upgrade (NSU) policy.
GradualConstraints: Definition and generation of typing constraints for Java methodTypings with gradual security types.
TaintTracking: a fairly complete implementation of a simple security type checker for (sequential) Java. The project Testcases contains test cases for TaintTracking.

Name		Name	Last commit message	Last commit date
Latest commit History 1,038 Commits
.idea		.idea
.metadata/.plugins/org.eclipse.debug.core/.launches		.metadata/.plugins/org.eclipse.debug.core/.launches
DynamicAnalyzer		DynamicAnalyzer
GradualConstraints		GradualConstraints
JGSSupport/src/main/java/de/unifreiburg/cs/proglang/jgs/support		JGSSupport/src/main/java/de/unifreiburg/cs/proglang/jgs/support
JGSTestclasses		JGSTestclasses
LMHSecurityDomain/src/main/java/de/unifreiburg/cs/proglang/jgs/rt		LMHSecurityDomain/src/main/java/de/unifreiburg/cs/proglang/jgs/rt
SampleProject		SampleProject
TaintTracking		TaintTracking
UserDefinedSecurityDomain/src/main/java/de/unifreiburg/cs/proglang/jgs/rt		UserDefinedSecurityDomain/src/main/java/de/unifreiburg/cs/proglang/jgs/rt
lib		lib
notes		notes
out-instrumented		out-instrumented
src		src
testclasses		testclasses
.gitignore		.gitignore
LICENSE		LICENSE
README.md		README.md
build.sbt		build.sbt
generate-jimple.sh		generate-jimple.sh
jgs-demo		jgs-demo
jgs-typechecking-output.txt		jgs-typechecking-output.txt
run-example.sh		run-example.sh