Recent Study on Programming Language for Information Security

A special issue of Applied Sciences (ISSN 2076-3417). This special issue belongs to the section "Computing and Artificial Intelligence".

Deadline for manuscript submissions: closed (10 February 2022) | Viewed by 2573

Special Issue Editor


E-Mail Website
Guest Editor
Information Technology Center, The University of Tokyo, Tokyo 113-0032, Japan
Interests: information security; programming language design and implementation
Special Issues, Collections and Topics in MDPI journals

Special Issue Information

Dear Colleagues,

Today, security is one of the major issues in computer science and systems science. A number of schemes have been proposed to analyze, support and enhance systems security. Among those, security support via programming languages is considered an essential approach. In fact, because programs are written in a specific programming language, information-security-related features, such as information flow and access control, are determined by those of the programming language in use. This has a fundamental significance as regards the analysis of programming languages in terms of information security.

The efforts made so far include the specification of secure coding rules, language constructs for security (e.g., SecureString) and secure library support. A number of programs have been rewritten by using modern programming languages that support security and modern secure coding rules. Theories and tools of security analysis and verification, such as information flow theory, formal system and type system, have also been provided and have proven to be very effective in finding and fixing security vulnerabilities of a target program. However, we still face a number of challenges in security support via programming language.

In this Special Issue, authors are cordially invited to submit papers concerning the theory and practice of programming languages for information security. In addition, case studies of programming languages for security are also welcome.

Dr. Hiroyuki Sato
Guest Editor

Manuscript Submission Information

Manuscripts should be submitted online at www.mdpi.com by registering and logging in to this website. Once you are registered, click here to go to the submission form. Manuscripts can be submitted until the deadline. All submissions that pass pre-check are peer-reviewed. Accepted papers will be published continuously in the journal (as soon as accepted) and will be listed together on the special issue website. Research articles, review articles as well as short communications are invited. For planned papers, a title and short abstract (about 100 words) can be sent to the Editorial Office for announcement on this website.

Submitted manuscripts should not have been published previously, nor be under consideration for publication elsewhere (except conference proceedings papers). All manuscripts are thoroughly refereed through a single-blind peer-review process. A guide for authors and other relevant information for submission of manuscripts is available on the Instructions for Authors page. Applied Sciences is an international peer-reviewed open access semimonthly journal published by MDPI.

Please visit the Instructions for Authors page before submitting a manuscript. The Article Processing Charge (APC) for publication in this open access journal is 2400 CHF (Swiss Francs). Submitted papers should be well formatted and use good English. Authors may use MDPI's English editing service prior to publication or during author revisions.

Keywords

  • Secure language construct
  • Secure coding rules
  • Secure library
  • Virtual machine security
  • Program verification theory and tool
  • Security analysis theory and tool
  • Formal systems
  • Type system

Published Papers (1 paper)

Order results
Result details
Select all
Export citation of selected articles as:

Research

34 pages, 1756 KiB  
Article
Formalism-Driven Development: Concepts, Taxonomy, and Practice
by Yepeng Ding and Hiroyuki Sato
Appl. Sci. 2022, 12(7), 3415; https://doi.org/10.3390/app12073415 - 27 Mar 2022
Cited by 1 | Viewed by 1890
Abstract
Formal methods are crucial in program specification and verification. Instead of building cases to test functionalities, formal methods specify functionalities as properties and mathematically prove them. Nevertheless, the applicability of formal methods is limited in most development processes due to the requirement of [...] Read more.
Formal methods are crucial in program specification and verification. Instead of building cases to test functionalities, formal methods specify functionalities as properties and mathematically prove them. Nevertheless, the applicability of formal methods is limited in most development processes due to the requirement of mathematical knowledge for developers. To promote the application of formal methods, we formulate formalism-driven development (FDD), which is an iterative and incremental development process that guides developers to adopt proper formal methods throughout the whole development lifespan. In FDD, system graphs, a variant of transition systems optimized for usability, are designed to model system structures and behaviors with representative properties. System graphs are built iteratively and incrementally via refinement. Properties of system graphs are specified in propositional and temporal logics and verified by model-checking techniques with interpretation over transition system. In addition, skeleton programs are generated based on system graphs and expose implementable interfaces for executing external algorithms and emitting observable effects. Furthermore, we present Seniz, a framework that practicalizes and automates FDD. In this paper, we explicate the concepts and taxonomy of FDD and discuss its practice. Full article
(This article belongs to the Special Issue Recent Study on Programming Language for Information Security)
Show Figures

Figure 1

Back to TopTop