tag:blogger.com,1999:blog-11295132.post3020965858223466888..comments2011-05-20T06:49:26.700-07:00sigfpehttp://www.blogger.com/profile/08096190433222340957noreply@blogger.comBlogger5125tag:blogger.com,1999:blog-11295132.post-77252419633929954632007-05-07T09:29:00.000-07:002007-05-07T09:29:00.000-07:00There is a paper which explains how to do security using arrows. It's called <A HREF="http://www.cis.upenn.edu/~stevez/papers/LZ06a.pdf" REL="nofollow">Encoding Information Flow in Haskell</A> and it's a pretty cool paper. There's also a follow-up paper by some other guys which shows how to extend the results with side effect and concurrency: <A HREF="http://www.cs.chalmers.se/%7Erusso/publications_files/tsai-russo-hughesCSF.ps" REL="nofollow">A Library for Secure Multi-threaded Information Flow in Haskell</A>.Josefhttp://www.blogger.com/profile/13272830598221833253noreply@blogger.comtag:blogger.com,1999:blog-11295132.post-4375268780681586152007-05-06T14:11:00.000-07:002007-05-06T14:11:00.000-07:00Your comment about comonads and security has intrigued me. I'm going to try and have something written up tonight that may clear things up for at least myself and hopefully be interesting to others.<BR/><BR/>Also, I'm sorry but the link I first posted looks really messed up on my laptop.<BR/><BR/>The paper is called Domain Separation by Construction, and is easily found on google scholar.Creighton Hogghttp://www.blogger.com/profile/09820771070038676909noreply@blogger.comtag:blogger.com,1999:blog-11295132.post-19950657991285219702007-05-06T13:09:00.000-07:002007-05-06T13:09:00.000-07:00Thomas,<BR/><BR/>I wasn't really seriously thinking about this as a security model, just as a way to think about monads.<BR/><BR/>Having said that, I've a feeling comonads can be used to handle privileges. I also think Arrows may be useful when you want something to be both monadic and comonadic. So I suspect you're right.sigfpehttp://www.blogger.com/profile/08096190433222340957noreply@blogger.comtag:blogger.com,1999:blog-11295132.post-7790623874863102172007-05-06T12:25:00.000-07:002007-05-06T12:25:00.000-07:00A straightforward extensions of this scheme is to not only tag the result with the right level, but to also control who may actually use sensitive data. I haven't thought this through, but I'm quite confident that this can be modeled nicely with arrows. The questions is how much type-level programming magic this would involve ...Thomas Schillinghttp://www.blogger.com/profile/04274984206279511399noreply@blogger.comtag:blogger.com,1999:blog-11295132.post-16300116156336485952007-05-05T20:41:00.000-07:002007-05-05T20:41:00.000-07:00Hi Mr. Sigfpe,<BR/>I don't know how much this'll interest you but there's a paper on using monad transformers to separate security levels for a separation kernel. I don't know if these ideas were ever actually incorporated in the Osker project or not. I've found hard to find out anything related to Programmatica.<BR/>http://www.cse.ogi.edu/PacSoft/projects/programatica/domainseparation.pdfCreighton Hogghttp://www.blogger.com/profile/09820771070038676909noreply@blogger.com