Language-based information-flow security
Cited by (1,001)
Items 101–200 of 1,001
- Crafting a usable microkernel, processor, and I/O system with strict and provable information flow securityMohit Tiwari, Jason K. Oberg, Xun Li, Jonathan Valamehr, Timothy E. Levin, Ben Hardekopf, Ryan Kastner, Frederic T. Chong, Timothy Sherwood · 2011 · Proceedings - International Symposium on Computer Architecture/Proceedings
- A survey of challenges for runtime verification from advanced application domains (beyond software)César Sánchez, Gerardo Schneider, Wolfgang Ahrendt, Ezio Bartocci, Domenico Bianculli, Christian Colombo, Ylìès Falcone, Adrian Francalanza, Srđan Krstić, Joa̋o M. Lourenço et al. · 2019 · Formal Methods in System Design
- Object Capabilities and Isolation of Untrusted Web ApplicationsSergio Maffeis, John C. Mitchell, Ankur Taly · 2010 · IEEE Symposium on Security and Privacy (S&P)
- Secrecy in Multiagent SystemsJoseph Yehuda Halpern, Kevin R. O'Neill · 2008 · ACM Transactions on Information and System Security
- Information flow control for secure cloud computingBacon, Jean, Eyers, David, Pasquier, Thomas F. J.-M., Singh, Jatinder, Papagiannis, Ioannis, Pietzuch, Peter · 2014 · IEEE Transactions on Network and Service Management
- Languages of the futureTim Sheard · 2004 · Companion to the ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications (OOPSLA Companion)
- Automating Efficient RAM-Model Secure ComputationChang Liu, Yan Huang, Elaine Shi, Jonathan I. Katz, Michael Hicks · 2014 · IEEE Symposium on Security and Privacy (S&P)
- Verification and change-impact analysis of access-control policiesKathi Fisler, Shriram Krishnamurthi, Leo A. Meyerovich, Michael Carl Tschantz · 2005 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
- MoatRohit Sinha, Sriram K. Rajamani, Sanjit Arunkumar Seshia, Kapil Vaswani · 2015 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Enforcing robust declassificationAndrew C. Myers, Andrei Sabelfeld, Steve Zdancewic · 2004 · ScholarlyCommons (University of Pennsylvania)
- Dynamic security labels and static information flow controlLantian Zheng, Andrew C. Myers · 2007 · International Journal of Information Security
- Spectre is here to stay: An analysis of side-channels and speculative executionMcilroy, Ross, Jaroslav Ševčík, Tobias Tebbi, Ben L. Titzer, T. Verwaest · 2019 · arXiv (Cornell University)
- Information flow control for Java based on path conditions in dependence graphsChristian Hammer, Jens Krinke, Gregor Snelting · 2006
- From Patches to Honey-PatchesFrederico Araujo, Kevin W. Hamlen, Sebastian Biedermann, Stefan Katzenbeisser · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Information Flow Analysis in Logical FormTorben Amtoft, Anindya Banerjee · 2004 · Lecture notes in computer science
- Information-Flow Security for Interactive ProgramsK.R. O'Neill, Michael R. Clarkson, Stephen Chong · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- Reactive noninterferenceAaron Bohannon, Benjamin C. Pierce, Vilhelm Sjöberg, Stephanie Weirich, Steve Zdancewic · 2009 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Enforcing Robust Declassification and Qualified RobustnessAndrew C. Myers, Andrei Sabelfeld, Steve Zdancewic · 2006 · Journal of Computer Security
- A survey of static analysis methods for identifying security vulnerabilities in software systemsMarco Pistoia, S. Chandra, Stephen J. Fink, Eran Yahav · 2007 · IBM Systems Journal
- CaissonXun Li, Mohit Tiwari, Jason K. Oberg, Vineeth Kashyap, Frederic T. Chong, Timothy Sherwood, Ben Hardekopf · 2011 · ACM SIGPLAN Notices
- Hardware Information Flow TrackingWei Hu, Armaiti Ardeshiricham, Ryan Kastner · 2021 · ACM Computing Surveys
- Linear Dependent Types and Relative CompletenessUgo Dal Lago, Marco Gaboardi · 2012 · Logical Methods in Computer Science
- Controlled Declassification Based on Intransitive NoninterferenceHeiko Mantel, David Sands · 2004 · Lecture notes in computer science
- Automatic detection and correction of web application vulnerabilities using data mining to predict false positivesIbéria Medeiros, Nuno Neves, Miguel Pupo Correia · 2014 · International World Wide Web Conference (WWW)
- Preserving Secrecy Under RefinementRajeev Alur A, Pavol Černý, Steve Zdancewic · 2006 · Lecture notes in computer science
- A survey of detection methods for XSS attacksUpasana Sarmah, Dhruba K. Bhattacharyya, Jugal Kumar Kalita · 2018 · Journal of Network and Computer Applications
- SOS formats and meta-theory: 20 years afterMohammad Reza Mousavi, Michel A. Reniers, Jan Friso Groote · 2006 · Theoretical Computer Science
- Dynamic Dependency Monitoring to Secure Information FlowParitosh Shroff, Scott F. Smith, Mark Thober · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
- A Virtual Machine Based Information Flow Control System for Policy EnforcementSrijith Krishnan Nair, Patrick N.D. Simpson, Bruno Crispo A, Andrew S. Tanenbaum · 2008 · Electronic Notes in Theoretical Computer Science
- Verifying information flow goals in Security-Enhanced LinuxJoshua D. Guttman, Amy L. Herzog, John D. Ramsdell, Clement William Skorupka · 2005 · Journal of Computer Security
- Encoding Information Flow in HaskellPeng Li, Steve Zdancewic · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- A Hardware Design Language for Timing-Sensitive Information-Flow SecurityDanfeng Zhang, Yao Wang, G. Edward Suh, Andrew C. Myers · 2015 · ACM SIGPLAN Notices
- Implicit Flows: Can’t Live with ‘Em, Can’t Live without ‘EmDave King, Boniface Hicks, Michael Hicks, Trent Jaeger · 2008 · Lecture notes in computer science
- Probabilistic relational verification for cryptographic implementationsGilles Barthe, Cédric Fournet A, Benjamin Grégoire, Pierre-Yves Strub, Nikhil Swamy, Santiago Zanella-Béguelin · 2014 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- Information Flow Control Revisited: Noninfluence = Noninterference + NonleakageDavid von Oheimb · 2004 · Lecture notes in computer science
- Measuring channel capacity to distinguish undue influenceJames Newsome, Stephen McCamant, Dawn Xiaodong Song · 2009 · ACM Workshop on Programming Languages and Analysis for Security
- Timing- and Termination-Sensitive Secure Information Flow: Exploring a New ApproachVineeth Kashyap, Ben Wiedermann Δ, Ben Hardekopf · 2011 · IEEE Symposium on Security and Privacy (S&P)
- Speculative Taint Tracking (STT): A Comprehensive Protection for Speculatively Accessed DataJiyong Yu, Mengjia Yan, Artem Khyzha, Adam Morrison, Josep Torrellas, Christopher W. Fletcher · 2020 · IEEE Micro
- AChecker: Statically Detecting Smart Contract Access Control VulnerabilitiesAsem Ghaleb, Julia Rubin, Karthik Pattabiraman · 2023 · ACM/IEEE International Conference on Software Engineering: Companion Proceedings (ICSE-Companion)
- Flow Locks: Towards a Core Calculus for Dynamic Flow PoliciesNiklas Broberg, David Sands · 2006 · Lecture notes in computer science
- A review of attacks and security approaches in open multi-agent systemsShahriar Bijani, David Robertson · 2012 · Artificial Intelligence Review
- Bootstrapping Privacy Compliance in Big Data SystemsShayak Sen, Saikat Guha, Anupam Datta, Sriram K. Rajamani, Janice Tsai, Jeannette M. Wing · 2014 · IEEE Symposium on Security and Privacy (S&P)
- Detecting and Debugging Insecure Information FlowsWes Masri, Andy Podgurski, D. Leon · 2005 · Proceedings/Proceedings - International Symposium on Software Reliability Engineering
- Data Oblivious ISA Extensions for Side Channel-Resistant and High Performance ComputingJiyong Yu, Lucas Hsiung, Mohamad El'Hajj, Christopher W. Fletcher · 2019 · Network and Distributed System Security Symposium
- Automaton-based Confidentiality Monitoring of Concurrent ProgramsGurvan Le Guernic · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
- A Survey of Dynamic Analysis and Test Generation for JavaScriptEsben Andreasen, Liang Gong, Anders Møller, Michael Pradel, Marija Selakovic, Koushik Sen, Cristian-Alexandru Staicu · 2017 · ACM Computing Surveys
- Principles of Secure Information Flow AnalysisGeoffrey Smith · 2007 · Springer eBooks
- Sleuth: Automated Verification of Software Power Analysis CountermeasuresAli Galip Bayrak, Francesco Regazzoni, David Novo, Paolo Ienne · 2013 · Lecture notes in computer science
- Collaborative Verification of Information Flow for a High-Assurance App StoreMichael D. Ernst, René Just, Suzanne Millstein, Werner Dietl, Stuart Pernsteiner, Franziska Roesner, Karl Koscher, Paulo Barros, Ravi Bhoraskar, Seungyeop Han et al. · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Execution leasesMohit Tiwari, Xun Li, Hassan M. G. Wassel, Frederic T. Chong, Timothy Sherwood · 2009 · IEEE/ACM International Symposium on Microarchitecture (MICRO)
- Information Flow Analysis for Java BytecodeSamir Genaim, Fausto Spoto · 2005 · Lecture notes in computer science
- A Type Discipline for Authorization in Distributed SystemsCédric Fournet A, Andrew D. Gordon, Sergio Maffeis · 2007 · IEEE Computer Security Foundations Workshop (CSFW)
- Scrash: a system for generating secure crash informationPeter M. Broadwell, Matthew Harren, Naveen Sastry · 2003 · USENIX Security Symposium
- Defending against sensor-sniffing attacks on mobile phonesLiang Cai, Sridhar Machiraju B, Hao Chen · 2009 · Networking, Systems, and Applications for Mobile Handhelds
- A Perspective on Information-Flow ControlHedin Daniel, Andrei Sabelfeld · 2012 · NATO science for peace and security series. D, Information and communication security
- Non-interference for a JVM-like languageGilles Barthe, Tamara Rezk · 2005 · Types In Languages Design And Implementation
- Dynamic Security Labels and NoninterferenceLantian Zheng, Andrew C. Myers · 2004
- FaCT: a DSL for timing-sensitive computationSunjay Cauligi, Gary Soeller, Brian Johannesmeyer, Fraser Brown, Riad S. Wahby, John Renner, Benjamin Grégoire, Gilles Barthe, Ranjit Jhala, Deian Stefan · 2019 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- A Classifier of Malicious Android ApplicationsGerardo Canfora, Francesco Mercaldo, Corrado Aaron Visaggio · 2013 · International Conference on Availability, Reliability and Security (ARES)
- Challenges for Information-flow SecuritySteve Zdancewic · 2004
- MrCryptSai Deep Tetali, Mohsen Lesani, Rupak Majumdar, Todd D. Millstein · 2013 · Conference on Object-Oriented Programming Systems, Languages, and Applications
- Secure serverless computing using dynamic information flow controlKalev Alpernas, Cormac Flanagan A, Sadjad Fouladi, Leonid Ryzhyk, Mooly Sagiv, Thomas Schmitz, Keith Winstein · 2018 · Proceedings of the ACM on Programming Languages
- Lagrange multipliers and maximum information leakage in different observational modelsPasquale Malacaria, Han Chen · 2008 · ACM Workshop on Programming Languages and Analysis for Security
- A Certified Lightweight Non-interference Java Bytecode VerifierGilles Barthe, David Pichardie, Tamara Rezk · 2007 · Lecture notes in computer science
- A Temporal Logic Characterisation of Oservational DeterminismMarieke Huisman, Pratik Worah, Kim Sunesen · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- Precise Detection of Side-Channel Vulnerabilities using Quantitative Cartesian Hoare LogicJia Chen, Yu Feng, Işıl Dillig · 2017 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- CaissonXun Li, Mohit Tiwari, Jason K. Oberg, Vineeth Kashyap, Frederic T. Chong, Timothy Sherwood, Ben Hardekopf · 2011 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Theoretical Fundamentals of Gate Level Information Flow TrackingWei Hu, Jason K. Oberg, Ali Umut Irturk, Mohit Tiwari, Timothy Sherwood, Dejun Mu, Ryan Kastner · 2011 · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
- A software-hardware architecture for self-protecting dataYu-Yuan Chen, Pramod A. Jamkhedkar, Ruby Bei-Loh Lee · 2012 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Timing Aware Information Flow Security for a JavaCard-like BytecodeDaniel S. Hedin, David Sands · 2005 · Electronic Notes in Theoretical Computer Science
- Memory Trace Oblivious Program ExecutionChang Liu, Michael Hicks, Elaine Shi · 2013 · IEEE Computer Security Foundations Workshop (CSFW)
- Approximation and Randomization for Quantitative Information-Flow AnalysisBoris Köpf, Andrey Rybalchenko · 2010 · IEEE Computer Security Foundations Workshop (CSFW)
- Preventing Information Leaks through Shadow ExecutionsRoberto Capizzi, Antonio Longo, Venkat N. Venkatakrishnan, Aravinda Prasad Sistla · 2008 · Annual Computer Security Applications Conference
- Journey Beyond Full Abstraction: Exploring Robust Property Preservation for Secure CompilationCarmine Abate, Roberto Blanco, Deepak Garg, Cătălin Hriţcu, Marco Patrignani, Jérémy Thibault · 2019 · IEEE Computer Security Foundations Workshop (CSFW)
- Preventing Timing Leaks Through Transactional Branching InstructionsGilles Barthe, Tamara Rezk, Martijn Warnier · 2006 · Electronic Notes in Theoretical Computer Science
- ALETHEIAOmer Tripp, Salvatore Guarnieri, Marco Pistoia, Aleksandr Y. Aravkin · 2014 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- CT-wasm: type-driven secure cryptography for the web ecosystemConrad Watt, John Renner, Natalie Popescu, Sunjay Cauligi, Deian Stefan · 2019 · Proceedings of the ACM on Programming Languages
- Probabilistic noninterference through weak probabilistic bisimulationGeoffrey Smith · 2004 · IEEE Computer Security Foundations Workshop (CSFW)
- Runtime Verification of k-Safety Hyperproperties in HyperLTLShreya Agrawal, Borzoo Bonakdarpour · 2016 · IEEE Computer Security Foundations Workshop (CSFW)
- Quantitative Analysis of Smart ContractsKrishnendu Chatterjee, Amir Kafshdar Goharshady, Yaron Velner · 2018 · Lecture notes in computer science
- Tracking Information Flow in Dynamic Tree StructuresAlejandro Russo, Andrei Sabelfeld, Andrey Chudnov · 2009 · Lecture notes in computer science
- HLIO: mixing static and dynamic typing for information-flow control in HaskellPablo Buiras, Dimitrios Vytiniotis, Alejandro Russo · 2015 · ACM SIGPLAN International Conference on Functional Programming (ICFP)
- A Framework for Building Privacy-Conscious Composite Web ServicesWei Xu, Venkat N. Venkatakrishnan, R. Sekar, I. V. Ramakrishnan · 2006 · IEEE International Conference on Web Services (ICWS)
- All Your IFCException Are Belong to UsCătălin Hriţcu, Michael Greenberg, Ben Karel, B. C. Pierce, Greg Morrisett · 2013 · IEEE Symposium on Security and Privacy (S&P)
- The KeY Platform for Verification and Analysis of Java ProgramsWolfgang Ahrendt, Bernhard Beckert, Daniel Bruns, Richard Bubel, Christoph Gladisch, Sarah Grebing, Reiner Hähnle, Martin Hentschel, Mihai Herda, Vladimir Klebanov et al. · 2014 · Lecture notes in computer science
- eTainter: detecting gas-related vulnerabilities in smart contractsAsem Ghaleb, Julia Rubin, Karthik Pattabiraman · 2022 · ACM SIGSOFT International Symposium on Software Testing and Analysis (ISSTA)
- Cross-tier, label-based security enforcement for web applicationsBrian J. Corcoran, Nikhil Swamy, Michael Hicks · 2009 · ACM SIGMOD International Conference on Management of Data (SIGMOD)
- Security Metrics for Object-Oriented Class DesignsBandar Mzel Alshammari, Colin Fidge, Diane Corney · 2009 · Asia-Pacific Conference on Quality Software (APAQS)
- Verification of a Practical Hardware Security Architecture Through Static Information Flow AnalysisAndrew Ferraiuolo, Rui Xu, Danfeng Zhang, Andrew C. Myers, G. Edward Suh · 2017 · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)
- On Declassification and the Non-Disclosure PolicyAna Almeida Matos, Gérard Boudol · 2005 · IEEE Computer Security Foundations Workshop (CSFW)
- Cryptographically sound implementations for typed information-flow securityCédric Fournet A, Tamara Rezk · 2008 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- A domain-specific programming language for secure multiparty computationJanus Dam Nielsen, Michael I. Schwartzbach · 2007 · ACM Workshop on Programming Languages and Analysis for Security
- Provenance as dependency analysisJames Cheney, Amal J. Ahmed, Umut A. Acar · 2011 · Mathematical Structures in Computer Science
- Eliminating Cache-Based Timing Attacks with Instruction-Based SchedulingDeian Stefan, Pablo Buiras, Edward Z. Yang, Amit A. Levy, David A. Terei, Alejandro Russo, David Mazières · 2013 · Lecture notes in computer science
- Structuring structural operational semanticsMohammad Reza Mousavi · 2005 · TU/e Research Portal
- Securing Interaction between Threads and the SchedulerAlejandro Russo, Andrei Sabelfeld · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- Towards fully automatic placement of security sanitizers and declassifiersBenjamin Livshits, Stephen Chong · 2013 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- CT-Wasm: Type-Driven Secure Cryptography for the Web EcosystemConrad Watt, Renner, John, Natalie Popescu, Sunjay Cauligi, Deian Stefan · 2019 · Apollo (University of Cambridge)
- Linear Dependent Types and Relative CompletenessUgo Dal Lago, Marco Gaboardi · 2011 · ACM/IEEE Symposium on Logic in Computer Science (LICS)
- Translating dependency into parametricityStephen Tse, Steve Zdancewic · 2004 · ACM SIGPLAN Notices