A type-based approach to program security
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Type-safety is a security measure.
“The Eiffel design-by-contract has many more features, but suffice to say that type-safety is also a security measure.”
From Zero-Trust Principles for Legacy Components: 12 Rules for Legacy Devices: An Antidote to Chaos (2021) · cites this paper as [15]
Cites
Security Policies and Security Models
Goguen, J. A., & Meseguer, J. (1982) · 1982 IEEE Symposium on Security and Privacy · doi:10.1109/sp.1982.10014 · Cited by 2,119 · see citing works
A lattice model of secure information flow
Denning, D. E. (1976) · Communications of the ACM · doi:10.1145/360051.360056 · Cited by 1,907 · see citing works
Necula, G. C. (1997) · Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages - POPL '97 · doi:10.1145/263699.263712 · Cited by 1,843 · see citing works
Certification of programs for secure information flow
Denning, D. E., & Denning, P. J. (1977) · Communications of the ACM · doi:10.1145/359636.359712 · Cited by 1,028 · see citing works
A sound type system for secure flow analysis
Volpano, D., Irvine, C., & Smith, G. (1996) · Journal of Computer Security · doi:10.3233/jcs-1996-42-304 · Cited by 972 · see citing works
Self-citationSimple imperative polymorphism
Wright, A. K. (1995) · LISP and Symbolic Computation · doi:10.1007/bf01018828 · Cited by 196 · see citing works
Type inference for polymorphic references
Tofte, M. (1990) · Information and Computation · doi:10.1016/0890-5401(90)90018-d · Cited by 185 · see citing works
An Axiomatic Approach to Information Flow in Programs
Andrews, G. R., & Reitman, R. P. (1980) · ACM Transactions on Programming Languages and Systems · doi:10.1145/357084.357088 · Cited by 151 · see citing works
Preliminary design of the programming language Forsythe
Reynolds, J. (2018) · Figshare · doi:10.1184/r1/6608582 · Cited by 112 · see citing works
Secrecy by typing in security protocols
Abadi, M. (1997) · Lecture notes in computer science · doi:10.1007/bfb0014571 · Cited by 102 · see citing works
Ørbæk, P., & Palsberg, J. (1997) · Journal of Functional Programming · doi:10.1017/s0956796897002906 · Cited by 99 · see citing works
(2022) · Formal Aspects of Computing · doi:10.1007/165.1433-299x · Cited by 97 · see citing works
Palsberg, J., & Ørbæk, P. (1995) · Cited by 86 · see citing works
Compile-time detection of information flow in sequential programs
Banâtre, J.-P., Bryce, C., & Métayer, D. L. (1994) · Lecture notes in computer science · doi:10.1007/3-540-58618-0_56 · Cited by 62 · see citing works
Principal type schemes for functional programs with overloading and subtyping
Smith, G. S. (1994) · Science of Computer Programming · doi:10.1016/0167-6423(94)00020-4 · Cited by 59 · see citing works
Self-citationA security flow control algorithm and its denotational semantics correctness proof
Mizuno, M., & Schmidt, D. M. (1992) · Formal Aspects of Computing · doi:10.1007/bf03180570 · Cited by 57 · see citing works
Tiuryn, J. (2003) · Proceedings - Symposium on Logic in Computer Science · doi:10.1109/lics.1992.185543 · Cited by 45 · see citing works
On the complexity of type inference with coercion
Wand, M., & O'Keefe, P. (1989) · doi:10.1145/99370.99394 · Cited by 35 · see citing works
Palsberg, J., & Ørb⇓ek, P. (1995) · Lecture notes in computer science · doi:10.1007/3-540-60360-3_47 · Cited by 23 · see citing works
Palsberg, J., & Ørbæk, P. (1995) · BRICS Report Series · doi:10.7146/brics.v2i31.19934 · Cited by 18 · see citing works
Ørbæk, P. (1995) · Lecture notes in computer science · doi:10.1007/3-540-59293-8_221 · Cited by 14 · see citing works
Polymorphic typing of variables and references
Smith, G., & Volpano, D. (1996) · ACM Transactions on Programming Languages and Systems · doi:10.1145/229542.229544 · Cited by 6 · see citing works
Self-citation
Flagged first, then by citations
Cited by
Sorted by citations
Language-based information-flow security
Sabelfeld, A., & Myers, A. C. (2003) · IEEE Journal on Selected Areas in Communications · doi:10.1109/jsac.2002.806121 · Cited by 1,907 · see citing works
Information flow control for secure cloud computing
Bacon, J., Eyers, D., Pasquier, T. F. J.-M., Singh, J., Papagiannis, I., & Pietzuch, P. (2014) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2013.122313.130423 · Cited by 105 · see citing works
Java Bytecode Verification: An Overview
Leroy, X. (2001) · Lecture Notes in Computer Science · doi:10.1007/3-540-44585-4_26 · Cited by 74 · see citing works
Zero-Trust Principles for Legacy Components: 12 Rules for Legacy Devices: An Antidote to Chaos
Køien, G. M. (2021) · Wireless Personal Communications · doi:10.1007/s11277-021-09055-1 · Cited by 24 · see citing works
- Authors
- Volpano, D., & Smith, G.
- Affiliations
- Naval Postgraduate School (US)
- Florida International University (US)
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer Berlin Heidelberg
- Published
- 1997
- Pages
- 607-621
- ISSN
- 0302-9743 (ISSN-L)
- 1611-3349
- OpenAlex
- W1518533182
- Cited by
- 225
- References
- 22
- Citations by year
- 2025: 3 · 2024: 1 · 2023: 2 · 2021: 4 · 2020: 8 · 2019: 4 · 2018: 3 · 2017: 3 · 2016: 5 · 2015: 5 · 2014: 6 · 2013: 7 · 2012: 7
- FWCI
- 9.21
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- Lecture notes in computer science (publishedVersion)
- Defense Technical Information Center (DTIC) (submittedVersion)
- Calhoun: The Naval Postgraduate School Institutional Archive (Naval Postgraduate School) (submittedVersion)
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Logic, programming, and type systems
- Physical Sciences › Computer Science › Artificial Intelligence › Security and Verification in Computing
- Social Sciences › Sociology and Political Science › Access Control and Trust
- Keywords
- type systems, software security, non-interference, information flow security, multilevel security, principal types, type inference, data loss prevention, procedural languages
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
