Enforcing Programming Guidelines with Region Types and Effects

Serdar Erbatur,Martin Hofmann,Eugen Zalinescu
DOI: https://doi.org/10.1007/978-3-319-71237-6_5
2018-01-24
Abstract:We present in this paper a new type and effect system for Java which can be used to ensure adherence to guidelines for secure web programming. The system is based on the region and effect system by Beringer, Grabowski, and Hofmann. It improves upon it by being parametrized over an arbitrary guideline supplied in the form of a finite monoid or automaton and a type annotation or mockup code for external methods. Furthermore, we add a powerful type inference based on precise interprocedural analysis and provide an implementation in the Soot framework which has been tested on a number of benchmarks including large parts of the Stanford SecuriBench.
Programming Languages,Logic in Computer Science,Software Engineering
What problem does this paper attempt to address?