VM-based Information Flow for Policy Enforcement

Regarding paper titled “A Virtual Machine Based Information Flow Control System for Policy Enforcement” by Nair et al. 

Nair et al. present an information flow control system which addresses the issue of implicit information flows using an extension of the Kaffe JVM. Trishul is implemented by extending Java Stack and Heap structures. The resulting framework is capable of dynamically assigning labels to objects and propagating these labels based on information and control flow. Label or “Taint” propagation is based on the Lattice based Information Flow Model by Denning.