Language-based information-flow security

Sabelfeld, A., Myers, A.C.·2003·IEEE Journal on Selected Areas in Communications

Cited by (1,001)

Items 101–200 of 1,001

  1. Crafting a usable microkernel, processor, and I/O system with strict and provable information flow security
    Mohit Tiwari, Jason K. Oberg, Xun Li, Jonathan Valamehr, Timothy E. Levin, Ben Hardekopf, Ryan Kastner, Frederic T. Chong, Timothy Sherwood · 2011 · Proceedings - International Symposium on Computer Architecture/Proceedings
  2. A survey of challenges for runtime verification from advanced application domains (beyond software)
    César Sánchez, Gerardo Schneider, Wolfgang Ahrendt, Ezio Bartocci, Domenico Bianculli, Christian Colombo, Ylìès Falcone, Adrian Francalanza, Srđan Krstić, Joa̋o M. Lourenço et al. · 2019 · Formal Methods in System Design
  3. Object Capabilities and Isolation of Untrusted Web Applications
    Sergio Maffeis, John C. Mitchell, Ankur Taly · 2010 · IEEE Symposium on Security and Privacy (S&P)
  4. Secrecy in Multiagent Systems
    Joseph Yehuda Halpern, Kevin R. O'Neill · 2008 · ACM Transactions on Information and System Security
  5. Information flow control for secure cloud computing
    Bacon, Jean, Eyers, David, Pasquier, Thomas F. J.-M., Singh, Jatinder, Papagiannis, Ioannis, Pietzuch, Peter · 2014 · IEEE Transactions on Network and Service Management
  6. Languages of the future
    Tim Sheard · 2004 · Companion to the ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA Companion)
  7. Automating Efficient RAM-Model Secure Computation
    Chang Liu, Yan Huang, Elaine Shi, Jonathan I. Katz, Michael Hicks · 2014 · IEEE Symposium on Security and Privacy (S&P)
  8. Verification and change-impact analysis of access-control policies
    Kathi Fisler, Shriram Krishnamurthi, Leo A. Meyerovich, Michael Carl Tschantz · 2005 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
  9. Moat
    Rohit Sinha, Sriram K. Rajamani, Sanjit Arunkumar Seshia, Kapil Vaswani · 2015 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  10. Enforcing robust declassification
    Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic · 2004 · ScholarlyCommons (University of Pennsylvania)
  11. Dynamic security labels and static information flow control
    Lantian Zheng, Andrew C. Myers · 2007 · International Journal of Information Security
  12. Spectre is here to stay: An analysis of side-channels and speculative execution
    Mcilroy, Ross, Jaroslav Ševčík, Tobias Tebbi, Ben L. Titzer, T. Verwaest · 2019 · arXiv (Cornell University)
  13. Information flow control for Java based on path conditions in dependence graphs
    Christian Hammer, Jens Krinke, Gregor Snelting · 2006
  14. From Patches to Honey-Patches
    Frederico Araujo, Kevin W. Hamlen, Sebastian Biedermann, Stefan Katzenbeisser · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  15. Information Flow Analysis in Logical Form
    Torben Amtoft, Anindya Banerjee · 2004 · Lecture notes in computer science
  16. Information-Flow Security for Interactive Programs
    K.R. O'Neill, Michael R. Clarkson, Stephen Chong · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
  17. Reactive noninterference
    Aaron Bohannon, Benjamin C. Pierce, Vilhelm Sjöberg, Stephanie Weirich, Steve Zdancewic · 2009 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  18. Enforcing Robust Declassification and Qualified Robustness
    Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic · 2006 · Journal of Computer Security
  19. A survey of static analysis methods for identifying security vulnerabilities in software systems
    Marco Pistoia, S. Chandra, Stephen J. Fink, Eran Yahav · 2007 · IBM Systems Journal
  20. Caisson
    Xun Li, Mohit Tiwari, Jason K. Oberg, Vineeth Kashyap, Frederic T. Chong, Timothy Sherwood, Ben Hardekopf · 2011 · ACM SIGPLAN Notices
  21. Hardware Information Flow Tracking
    Wei Hu, Armaiti Ardeshiricham, Ryan Kastner · 2021 · ACM Computing Surveys
  22. Linear Dependent Types and Relative Completeness
    Ugo Dal Lago, Marco Gaboardi · 2012 · Logical Methods in Computer Science
  23. Controlled Declassification Based on Intransitive Noninterference
    Heiko Mantel, David Sands · 2004 · Lecture notes in computer science
  24. Automatic detection and correction of web application vulnerabilities using data mining to predict false positives
    Ibéria Medeiros, Nuno Neves, Miguel Pupo Correia · 2014 · International World Wide Web Conference (WWW)
  25. Preserving Secrecy Under Refinement
    Rajeev Alur A, Pavol Černý, Steve Zdancewic · 2006 · Lecture notes in computer science
  26. A survey of detection methods for XSS attacks
    Upasana Sarmah, Dhruba K. Bhattacharyya, Jugal Kumar Kalita · 2018 · Journal of Network and Computer Applications
  27. SOS formats and meta-theory: 20 years after
    Mohammad Reza Mousavi, Michel A. Reniers, Jan Friso Groote · 2006 · Theoretical Computer Science
  28. Dynamic Dependency Monitoring to Secure Information Flow
    Paritosh Shroff, Scott F. Smith, Mark Thober · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
  29. A Virtual Machine Based Information Flow Control System for Policy Enforcement
    Srijith Krishnan Nair, Patrick N.D. Simpson, Bruno Crispo A, Andrew S. Tanenbaum · 2008 · Electronic Notes in Theoretical Computer Science
  30. Verifying information flow goals in Security-Enhanced Linux
    Joshua D. Guttman, Amy L. Herzog, John D. Ramsdell, Clement William Skorupka · 2005 · Journal of Computer Security
  31. Encoding Information Flow in Haskell
    Peng Li, Steve Zdancewic · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
  32. A Hardware Design Language for Timing-Sensitive Information-Flow Security
    Danfeng Zhang, Yao Wang, G. Edward Suh, Andrew C. Myers · 2015 · ACM SIGPLAN Notices
  33. Implicit Flows: Can’t Live with ‘Em, Can’t Live without ‘Em
    Dave King, Boniface Hicks, Michael Hicks, Trent Jaeger · 2008 · Lecture notes in computer science
  34. Probabilistic relational verification for cryptographic implementations
    Gilles Barthe, Cédric Fournet A, Benjamin Grégoire, Pierre-Yves Strub, Nikhil Swamy, Santiago Zanella-Béguelin · 2014 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
  35. Information Flow Control Revisited: Noninfluence = Noninterference + Nonleakage
    David von Oheimb · 2004 · Lecture notes in computer science
  36. Measuring channel capacity to distinguish undue influence
    James Newsome, Stephen McCamant, Dawn Xiaodong Song · 2009 · ACM Workshop on Programming Languages and Analysis for Security
  37. Timing- and Termination-Sensitive Secure Information Flow: Exploring a New Approach
    Vineeth Kashyap, Ben Wiedermann Δ, Ben Hardekopf · 2011 · IEEE Symposium on Security and Privacy (S&P)
  38. Speculative Taint Tracking (STT): A Comprehensive Protection for Speculatively Accessed Data
    Jiyong Yu, Mengjia Yan, Artem Khyzha, Adam Morrison, Josep Torrellas, Christopher W. Fletcher · 2020 · IEEE Micro
  39. AChecker: Statically Detecting Smart Contract Access Control Vulnerabilities
    Asem Ghaleb, Julia Rubin, Karthik Pattabiraman · 2023 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
  40. Flow Locks: Towards a Core Calculus for Dynamic Flow Policies
    Niklas Broberg, David Sands · 2006 · Lecture notes in computer science
  41. A review of attacks and security approaches in open multi-agent systems
    Shahriar Bijani, David Robertson · 2012 · Artificial Intelligence Review
  42. Bootstrapping Privacy Compliance in Big Data Systems
    Shayak Sen, Saikat Guha, Anupam Datta, Sriram K. Rajamani, Janice Tsai, Jeannette M. Wing · 2014 · IEEE Symposium on Security and Privacy (S&P)
  43. Detecting and Debugging Insecure Information Flows
    Wes Masri, Andy Podgurski, D. Leon · 2005 · Proceedings/Proceedings - International Symposium on Software Reliability Engineering
  44. Data Oblivious ISA Extensions for Side Channel-Resistant and High Performance Computing
    Jiyong Yu, Lucas Hsiung, Mohamad El'Hajj, Christopher W. Fletcher · 2019 · Network and Distributed System Security Symposium
  45. Automaton-based Confidentiality Monitoring of Concurrent Programs
    Gurvan Le Guernic · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
  46. A Survey of Dynamic Analysis and Test Generation for JavaScript
    Esben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu · 2017 · ACM Computing Surveys
  47. Principles of Secure Information Flow Analysis
    Geoffrey Smith · 2007 · Springer eBooks
  48. Sleuth: Automated Verification of Software Power Analysis Countermeasures
    Ali Galip Bayrak, Francesco Regazzoni, David Novo, Paolo Ienne · 2013 · Lecture notes in computer science
  49. Collaborative Verification of Information Flow for a High-Assurance App Store
    Michael D. Ernst, René Just, Suzanne Millstein, Werner Dietl, Stuart Pernsteiner, Franziska Roesner, Karl Koscher, Paulo Barros, Ravi Bhoraskar, Seungyeop Han et al. · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  50. Execution leases
    Mohit Tiwari, Xun Li, Hassan M. G. Wassel, Frederic T. Chong, Timothy Sherwood · 2009 · IEEE/ACM International Symposium on Microarchitecture (MICRO)
  51. Information Flow Analysis for Java Bytecode
    Samir Genaim, Fausto Spoto · 2005 · Lecture notes in computer science
  52. A Type Discipline for Authorization in Distributed Systems
    Cédric Fournet A, Andrew D. Gordon, Sergio Maffeis · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
  53. Scrash: a system for generating secure crash information
    Peter M. Broadwell, Matthew Harren, Naveen Sastry · 2003 · USENIX Security Symposium
  54. Defending against sensor-sniffing attacks on mobile phones
    Liang Cai, Sridhar Machiraju B, Hao Chen · 2009 · Networking, Systems, and Applications for Mobile Handhelds
  55. A Perspective on Information-Flow Control
    Hedin Daniel, Andrei Sabelfeld · 2012 · NATO science for peace and security series. D, Information and communication security
  56. Non-interference for a JVM-like language
    Gilles Barthe, Tamara Rezk · 2005 · Types In Languages Design And Implementation
  57. Dynamic Security Labels and Noninterference
    Lantian Zheng, Andrew C. Myers · 2004
  58. FaCT: a DSL for timing-sensitive computation
    Sunjay Cauligi, Gary Soeller, Brian Johannesmeyer, Fraser Brown, Riad S. Wahby, John Renner, Benjamin Grégoire, Gilles Barthe, Ranjit Jhala, Deian Stefan · 2019 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
  59. A Classifier of Malicious Android Applications
    Gerardo Canfora, Francesco Mercaldo, Corrado Aaron Visaggio · 2013 · International Conference on Availability, Reliability and Security (ARES)
  60. Challenges for Information-flow Security
    Steve Zdancewic · 2004
  61. MrCrypt
    Sai Deep Tetali, Mohsen Lesani, Rupak Majumdar, Todd D. Millstein · 2013 · Conference on Object-Oriented Programming Systems, Languages, and Applications
  62. Secure serverless computing using dynamic information flow control
    Kalev Alpernas, Cormac Flanagan A, Sadjad Fouladi, Leonid Ryzhyk, Mooly Sagiv, Thomas Schmitz, Keith Winstein · 2018 · Proceedings of the ACM on Programming Languages
  63. Lagrange multipliers and maximum information leakage in different observational models
    Pasquale Malacaria, Han Chen · 2008 · ACM Workshop on Programming Languages and Analysis for Security
  64. A Certified Lightweight Non-interference Java Bytecode Verifier
    Gilles Barthe, David Pichardie, Tamara Rezk · 2007 · Lecture notes in computer science
  65. A Temporal Logic Characterisation of Oservational Determinism
    Marieke Huisman, Pratik Worah, Kim Sunesen · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
  66. Precise Detection of Side-Channel Vulnerabilities using Quantitative Cartesian Hoare Logic
    Jia Chen, Yu Feng, Işıl Dillig · 2017 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  67. Caisson
    Xun Li, Mohit Tiwari, Jason K. Oberg, Vineeth Kashyap, Frederic T. Chong, Timothy Sherwood, Ben Hardekopf · 2011 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
  68. Theoretical Fundamentals of Gate Level Information Flow Tracking
    Wei Hu, Jason K. Oberg, Ali Umut Irturk, Mohit Tiwari, Timothy Sherwood, Dejun Mu, Ryan Kastner · 2011 · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
  69. A software-hardware architecture for self-protecting data
    Yu-Yuan Chen, Pramod A. Jamkhedkar, Ruby Bei-Loh Lee · 2012 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  70. Timing Aware Information Flow Security for a JavaCard-like Bytecode
    Daniel S. Hedin, David Sands · 2005 · Electronic Notes in Theoretical Computer Science
  71. Memory Trace Oblivious Program Execution
    Chang Liu, Michael Hicks, Elaine Shi · 2013 · IEEE Computer Security Foundations Workshop (CSFW)
  72. Approximation and Randomization for Quantitative Information-Flow Analysis
    Boris Köpf, Andrey Rybalchenko · 2010 · IEEE Computer Security Foundations Workshop (CSFW)
  73. Preventing Information Leaks through Shadow Executions
    Roberto Capizzi, Antonio Longo, Venkat N. Venkatakrishnan, Aravinda Prasad Sistla · 2008 · Annual Computer Security Applications Conference
  74. Journey Beyond Full Abstraction: Exploring Robust Property Preservation for Secure Compilation
    Carmine Abate, Roberto Blanco, Deepak Garg, Cătălin Hriţcu, Marco Patrignani, Jérémy Thibault · 2019 · IEEE Computer Security Foundations Workshop (CSFW)
  75. Preventing Timing Leaks Through Transactional Branching Instructions
    Gilles Barthe, Tamara Rezk, Martijn Warnier · 2006 · Electronic Notes in Theoretical Computer Science
  76. ALETHEIA
    Omer Tripp, Salvatore Guarnieri, Marco Pistoia, Aleksandr Y. Aravkin · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
  77. CT-wasm: type-driven secure cryptography for the web ecosystem
    Conrad Watt, John Renner, Natalie Popescu, Sunjay Cauligi, Deian Stefan · 2019 · Proceedings of the ACM on Programming Languages
  78. Probabilistic noninterference through weak probabilistic bisimulation
    Geoffrey Smith · 2004 · IEEE Computer Security Foundations Workshop (CSFW)
  79. Runtime Verification of k-Safety Hyperproperties in HyperLTL
    Shreya Agrawal, Borzoo Bonakdarpour · 2016 · IEEE Computer Security Foundations Workshop (CSFW)
  80. Quantitative Analysis of Smart Contracts
    Krishnendu Chatterjee, Amir Kafshdar Goharshady, Yaron Velner · 2018 · Lecture notes in computer science
  81. Tracking Information Flow in Dynamic Tree Structures
    Alejandro Russo, Andrei Sabelfeld, Andrey Chudnov · 2009 · Lecture notes in computer science
  82. HLIO: mixing static and dynamic typing for information-flow control in Haskell
    Pablo Buiras, Dimitrios Vytiniotis, Alejandro Russo · 2015 · ACM SIGPLAN International Conference on Functional Programming (ICFP)
  83. A Framework for Building Privacy-Conscious Composite Web Services
    Wei Xu, Venkat N. Venkatakrishnan, R. Sekar, I. V. Ramakrishnan · 2006 · IEEE International Conference on Web Services (ICWS)
  84. All Your IFCException Are Belong to Us
    Cătălin Hriţcu, Michael Greenberg, Ben Karel, B. C. Pierce, Greg Morrisett · 2013 · IEEE Symposium on Security and Privacy (S&P)
  85. The KeY Platform for Verification and Analysis of Java Programs
    Wolfgang Ahrendt, Bernhard Beckert, Daniel Bruns, Richard Bubel, Christoph Gladisch, Sarah Grebing, Reiner Hähnle, Martin Hentschel, Mihai Herda, Vladimir Klebanov et al. · 2014 · Lecture notes in computer science
  86. eTainter: detecting gas-related vulnerabilities in smart contracts
    Asem Ghaleb, Julia Rubin, Karthik Pattabiraman · 2022 · ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)
  87. Cross-tier, label-based security enforcement for web applications
    Brian J. Corcoran, Nikhil Swamy, Michael Hicks · 2009 · ACM SIGMOD International Conference on Management of Data (SIGMOD)
  88. Security Metrics for Object-Oriented Class Designs
    Bandar Mzel Alshammari, Colin Fidge, Diane Corney · 2009 · Asia-Pacific Conference on Quality Software (APAQS)
  89. Verification of a Practical Hardware Security Architecture Through Static Information Flow Analysis
    Andrew Ferraiuolo, Rui Xu, Danfeng Zhang, Andrew C. Myers, G. Edward Suh · 2017 · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)
  90. On Declassification and the Non-Disclosure Policy
    Ana Almeida Matos, Gérard Boudol · 2005 · IEEE Computer Security Foundations Workshop (CSFW)
  91. Cryptographically sound implementations for typed information-flow security
    Cédric Fournet A, Tamara Rezk · 2008 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
  92. A domain-specific programming language for secure multiparty computation
    Janus Dam Nielsen, Michael I. Schwartzbach · 2007 · ACM Workshop on Programming Languages and Analysis for Security
  93. Provenance as dependency analysis
    James Cheney, Amal J. Ahmed, Umut A. Acar · 2011 · Mathematical Structures in Computer Science
  94. Eliminating Cache-Based Timing Attacks with Instruction-Based Scheduling
    Deian Stefan, Pablo Buiras, Edward Z. Yang, Amit A. Levy, David A. Terei, Alejandro Russo, David Mazières · 2013 · Lecture notes in computer science
  95. Structuring structural operational semantics
    Mohammad Reza Mousavi · 2005 · TU/e Research Portal
  96. Securing Interaction between Threads and the Scheduler
    Alejandro Russo, Andrei Sabelfeld · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
  97. Towards fully automatic placement of security sanitizers and declassifiers
    Benjamin Livshits, Stephen Chong · 2013 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
  98. CT-Wasm: Type-Driven Secure Cryptography for the Web Ecosystem
    Conrad Watt, Renner, John, Natalie Popescu, Sunjay Cauligi, Deian Stefan · 2019 · Apollo (University of Cambridge)
  99. Linear Dependent Types and Relative Completeness
    Ugo Dal Lago, Marco Gaboardi · 2011 · ACM/IEEE Symposium on Logic in Computer Science (LICS)
  100. Translating dependency into parametricity
    Stephen Tse, Steve Zdancewic · 2004 · ACM SIGPLAN Notices