Write a Blog >>
SLE 2020
Sun 15 - Fri 20 November 2020 Online Conference
co-located with SPLASH 2020
Mon 16 Nov 2020 07:00 - 07:20 at SPLASH-III - Chair(s): Juan de Lara
Mon 16 Nov 2020 19:00 - 19:20 at SPLASH-III - Chair(s): David J. Pearce

Application-level packet filtering is a technique for network access control in which an “application-level gateway” intercepts network packages at the application level (e.g., HTTP, FTP), scans them for security cooncerns and optionally logs, rewrites or discards them. Existing application-level filters express their filtering rules in general-purpose languages, which limits the correctness guarantees available for them.

We present the first declarative language for application-level network filtering, developed at Advenica AB. Our DSL uses security assertions to express properties that packets must have to be allowed through the network (e.g., “IMAP packet contains no executable attachment” or “SQL reply contains only explicitly permitted columns”), along with remedies that either reject or rewrite undesirable packets.

We have designed the language around the needs of network filter developers, with a focus on correctness: our language can statically verify several properties of filter programs, such as well-formedness of the outcome, confluence, and termination, with the help of an off-the-shelf SMT solver.

Our initial results show that the language is sufficiently expressive for a variety of network protocols, closely maps to the application domain, is usable by network filter engineers, and provides strong correctness guarantees.

Mon 16 Nov

Displayed time zone: Central Time (US & Canada) change

07:00 - 08:20
GPCE / SLE at SPLASH-III +12h
Chair(s): Juan de Lara Autonomous University of Madrid
07:00
20m
Talk
A Domain-Specific Language for Filtering in Application-Level Gateways
GPCE
Hampus Balldin Advenica, Christoph Reichenbach Lund University
Link to publication DOI Media Attached
07:20
20m
Talk
Towards the Optical Character Recognition of DSLs
SLE
Jorge Perianez Pascual University of Extremadura, Spain, Roberto Rodriguez-Echeverria University of Extremadura, Spain, Loli Burgueño Open University of Catalonia, Spain, Jordi Cabot Open University of Catalonia, Spain
Link to publication DOI Pre-print Media Attached
07:40
20m
Talk
eFLINT: A Domain-Specific Language for Executable Norm Specifications
GPCE
L. Thomas van Binsbergen CWI, Lu-Chi Liu University of Amsterdam, Robert van Doesburg Leibniz Institute / University of Amsterdam / TNO, Tom van Engers Leibniz Institute / University of Amsterdam / TNO
Link to publication DOI Pre-print Media Attached
08:00
20m
Talk
Annotating Executable DSLs with Energy Estimation Formulas
SLE
Thibault Béziers la Fosse IMT Atlantique, ICAM, Massimo Tisi , Jean-Marie Mottu Université de Nantes, LS2N, IMT Atlantique, Gerson Sunyé Université de Nantes, LS2N
Link to publication DOI Media Attached
19:00 - 20:20
SLE / GPCE at SPLASH-III
Chair(s): David J. Pearce Victoria University of Wellington, New Zealand
19:00
20m
Talk
A Domain-Specific Language for Filtering in Application-Level Gateways
GPCE
Hampus Balldin Advenica, Christoph Reichenbach Lund University
Link to publication DOI Media Attached
19:20
20m
Talk
Towards the Optical Character Recognition of DSLs
SLE
Jorge Perianez Pascual University of Extremadura, Spain, Roberto Rodriguez-Echeverria University of Extremadura, Spain, Loli Burgueño Open University of Catalonia, Spain, Jordi Cabot Open University of Catalonia, Spain
Link to publication DOI Pre-print Media Attached
19:40
20m
Talk
eFLINT: A Domain-Specific Language for Executable Norm Specifications
GPCE
L. Thomas van Binsbergen CWI, Lu-Chi Liu University of Amsterdam, Robert van Doesburg Leibniz Institute / University of Amsterdam / TNO, Tom van Engers Leibniz Institute / University of Amsterdam / TNO
Link to publication DOI Pre-print Media Attached
20:00
20m
Talk
Annotating Executable DSLs with Energy Estimation Formulas
SLE
Thibault Béziers la Fosse IMT Atlantique, ICAM, Massimo Tisi , Jean-Marie Mottu Université de Nantes, LS2N, IMT Atlantique, Gerson Sunyé Université de Nantes, LS2N
Link to publication DOI Media Attached