Doligez, Damien

Faure, Christèle

Hardin, Thérèse

Maarek, Manuel

English

While the use of XML is pervading all areas of IT, security challenges arise when XML files are used to transfer security data such as security policies. To tackle this issue, we have developed a lightweight secure XML validator and have chosen to base the development on the strongly typed functional language OCaml. The initial development took place as part of the LaFoSec Study which aimed at investigating the impact of using functional languages for security. We then turned the validator into an industrial application, which was successfully evaluated at EAL4+ level by independent assessors. In this paper, we explain the challenges involved in processing XML data in a critical context, we describe our choices in designing a secure XML validator, and we detail how we used features of functional languages to enforce security requirements

Heriot Watt Pure

Avoiding Security Pitfalls with Functional Programming:A Report on the Development of a Secure XML Validator

Damien Doligez

Christele Faure

Therese Hardin

Manuel Maarek

Crossref

Avoiding Security Pitfalls with Functional Programming: A Report on the Development of a Secure XML Validator

https://pureapps2.hw.ac.uk/ws/files/10142796/15_ICSE_SEIP_DolFauHarMaa.pdf

Avoiding Security Pitfalls with Functional Programming:A Report on the Development of a Secure XML Validator

Abstract

Similar works

Full text

Available Versions

Heriot Watt Pure

Crossref

Heriot Watt Pure