Types and effects for non-interfering program monitors
Lujo Bauer, Jarred Adam Ligatti, David P. Walker · 2003
A run-time monitor is a program that runs in parallel with an untrusted application and examines actions from the application's instruction stream. If the sequence of program actions deviates from a specified security policy, the monitor transforms the sequence or terminates the program. We present the design and formal specification of a language for defining the policies enforced by program monitors. Our language provides