Information flow control in a parallel language framework

Abstract

A discussion is given on a programming language based approach to information flow control in a system of communicating processes. The approach differs from previous work in that the security level approach to controlling flows is replaced by a mechanism where flows are registered in terms of the set of variable signaling information and that the manner of registering the inter-process information flows does not require any extra message exchanges. The language chosen to present these ideas is Hoare's CSP. The authors give the "security semantics" of CSP and show, with the aid of two examples, how these semantics can be used to conduct security proofs of parallel programs.