Runtime-policy-enforcement Project

Project Overview

The runtime-policy-enforcement project investigates the theory and practice of monitoring software to enforce security and privacy policies at runtime.  We study models of enforcement mechanisms that operate at runtime, so we can improve our understanding of those mechanisms' capabilities and limitations.  We also design languages and systems for specifying and enforcing runtime-security policies.
 

Publications

• A Theory of Runtime Enforcement, with Results. Jay Ligatti and Srikar Reddy. Technical Report USF-CSE-SS-102809, University of South Florida, October 2009, revised February 2010. [BibTeX]
• LoPSiL: A Location-based Policy-specification Language. Jay Ligatti, Billy Rickey, and Nalin Saigal. Proceedings of the International ICST Conference on Security and Privacy in Mobile Information and Communication Systems (MobiSec), June 2009. [BibTeX]
   

Software

• LoPSiL.zip    New! Download version 0.4 of our implementation of LoPSiL, a location-based policy-specification language.
   

People

Current Participants:

• Lujo Bauer
• Jay Ligatti
• Yannis Mallios
• Nalin Saigal

Alumni:

• Srikar Reddy (USF Master's student, 2007-2009)
• Billy Rickey (NSF-REU student at USF in summer 2007)