Policies and Proofs for Code Auditing
Nathan Whitehead1, Jordan Johnson1 and Martín Abadi1, 2
| (1) |
University of California, Santa Cruz, |
Abstract
Both proofs and trust relations play a role in security decisions, in particular in determining whether to execute a piece
of code. We have developed a language, called BCIC, for policies that combine proofs and trusted assertions about code. In
this paper, using BCIC, we suggest an approach to code auditing that bases auditing decisions on logical policies and tools.
References secured to subscribers.