SOLj: A Domain-Specific Language (DSL) for Secure Service-Based Systems

We present SOLj (Secure Operations Language-Java), an event-driven domain-specific synchronous programming extension of Java for developing secure service-based systems. The language has capabilities for handling service invocations asynchronously, includes strong typing for the enforcement of information flow and security policies, and exception handling mechanisms to deal with failures of components or services (both benign and Byzantine). Applications written in SOLj are formally verifiable using static analysis techniques. SOLj programs may be deployed, configured, and run on SINS (Secure Infrastructure for Networked Systems) under development at the Naval Research Laboratory