Code-Carrying Authorization

Sergio Maffeis, Martín Abadi, Cédric Fournet, Andrew D. Gordon

Research output: Chapter in Book/Report/Conference proceedingConference contribution


In authorization, there is often a wish to shift the burden of proof to those making requests, since they may have more resources and more specific knowledge to construct the required proofs. We introduce an extreme instance of this approach, which we call Code-Carrying Authorization (CCA). With CCA, access-control decisions can partly be delegated to untrusted code obtained at run-time. The dynamic verification of this code ensures the safety of authorization decisions. We define and study this approach in the setting of a higher-order spi calculus. The type system of this calculus provides the needed support for static and dynamic verification.
Original languageEnglish
Title of host publicationComputer Security - ESORICS 2008
Subtitle of host publication13th European Symposium on Research in Computer Security, Málaga, Spain, October 6-8, 2008. Proceedings
PublisherSpringer Berlin Heidelberg
Number of pages17
ISBN (Electronic)978-3-540-88313-5
ISBN (Print)978-3-540-88312-8
Publication statusPublished - 2008

Fingerprint Dive into the research topics of 'Code-Carrying Authorization'. Together they form a unique fingerprint.

Cite this