Docente: Luís Caires
Uma área actualmente muito activa dentro da segurança informática relaciona-se com o uso de métodos linguísticos para exprimir propriedades de segurança e garantir que tais propriedades são respeitadas. Neste módulo apresentam-se técnicas e metodologias ao nível das linguagens de programação relacionadas com a segurança. Tópicos cobertos:
Andrei Sabelfeld, Andrew C. Myers. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, 21(1):5–19, Jan. 2003.
Cedric Fournet, Andrew D. Gordon. Stack Inspection: Theory and Variants. POPL'02, 2002.
Fred B. Schneider, Greg Morrisett, Robert Harper. A language-based approach to security. Informatics: 10 Years Back, 10 Years Ahead, Lecture Notes in Computer Science, Vol. 2000, Springer-Verlag, Heidelberg, 86–101, 2000.
G. Morrisett, K. Crary, N. Glew, D. Grossman, R. Samuels, F. Smith, D. Walker, S. Weirich, and S. Zdancewic. TALx86: a realistic typed assembly language. 1999 ACM SIGPLAN Workshop on Compiler Support for System Software, pages 25–35, Atlanta, GA, USA, May 1999.Concurrent and Distributed Programming. Chapter 14 in "Concepts in Programming Languages", John C. Mitchell, Cambridge University Press, 2003.
Trevor Jim, Greg Morrisett, Dan Grossman, Michael Hicks, James Cheney, Yanling Wang. Cyclone: a safe dialect of C. USENIX Annual Technical Conference, pages 275–288, Monterey, CA, June 2002.
.K. Jones, B.H. Liskov. A language extension for controlling access to shared data. IEEE Transactions on Software Engineering 2(4), pp. 277–285 (1976)