Program specialization for execution monitoring

Local policies for resource usage analysis

“…Many authors [Colcombet and Fradet 2000;Erlingsson and Schneider 1999;Marriott et al 2003;Thiemann 2003] mixed static and dynamic techniques to transform programs and make them obey a given global policy. Colcombet and Fradet abstracted a program into a control flow graph, instrumented with annotations that keep track of the state of the global policy [Colcombet and Fradet 2000].…”

“…If the language generated by the grammar is not included in the language accepted by automaton, the program is instrumented with the local checks and the tracking operations needed to make it obey the policy. Both Erlingsson and Schneider [1999] and Thiemann [2003] specialize security automata to programs by inserting security checks into the object code generated by a compiler. The first article reports on work on the field, and describes prototypes for the machine architectures Intelx86 and Java JVML.…”

“…The second article faces the problem in the more abstract framework of the λ-calculus and exploits type specialization to also remove runtime operations on the security state. Unlike Colcombet and Fradet [2000], Erlingsson and Schneider [1999], Marriott et al [2003], and Thiemann [2003], our λ [ ] also allows for local, parametric policies, and for dynamically created resources. In Colcombet and Fradet [2000] and Marriott et al [2003] when a program cannot be statically proved to obey the global policy, it is instrumented with runtime checks that will abort its execution before the policy is violated.…”