Language-based information-flow security
Cited by (1,001)
Items 201–300 of 1,001
- Sharing Mobile Code Securely with Information Flow ControlOwen Arden, Michael D. George, Jed Liu, K. Vikram, Aslan Askarov, Andrew C. Myers · 2012 · IEEE Symposium on Security and Privacy (S&P)
- A verified information-flow architectureArthur Azevedo de Amorim, Nathan S. Collins, André M. DeHon, Delphine Demange, Cătălin Hriţcu, David Pichardie, Benjamin C. Pierce, Randy Pollack, Andrew P. Tolmach · 2014 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- Language based security for Java and JMLMartijn Warnier · 2006
- A unifying approach to the security of distributed and multi-threaded programs1Heiko Mantel, Andrei Sabelfeld · 2003 · Journal of Computer Security
- Run-Time Enforcement of Information-Flow Properties on AndroidLimin Jia, Jassim Aljuraidan, Elli Fragkaki, Lujo Bauer, Michael Stroucken, Kazuhide Fukushima, Shinsaku Kiyomoto, Yutaka Miyake · 2013 · Lecture notes in computer science
- A logical specification and analysis for SELinux MLS policyBoniface Hicks, Sandra Julieta Rueda, Luke St. Clair, Trent Jaeger, Patrick Drew McDaniel · 2010 · ACM Transactions on Information and System Security
- Formal Verification of Software Countermeasures against Side-Channel AttacksHassan Eldib, Chao Wang, Patrick R. Schaumont · 2014 · ACM Transactions on Software Engineering and Methodology
- A lattice-based approach to mashup securityJonas Magazinius, Aslan Askarov, Andrei Sabelfeld · 2010 · ACM Asia Conference on Computer and Communications Security (ASIA CCS)
- Arrows for secure information flowPeng Li, Steve Zdancewic · 2010 · Theoretical Computer Science
- Non-tracking web analyticsİstemi Ekin Akkuş, Ruichuan Chen, Michaela Hardt, Paul Francis, Johannes E. Gehrke · 2012 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Provenance as Dependency AnalysisJames Cheney, Amal J. Ahmed, Umut A. Acar · 2007 · Springer eBooks
- Security-Typed Languages for Implementation of Cryptographic Protocols: A Case StudyAslan Askarov, Andrei Sabelfeld · 2005 · Lecture notes in computer science
- Semantics and applications of process and program algebraThuy Duong Vu · 2007 · Data Archiving and Networked Services (DANS)
- Learning is Change in Knowledge: Knowledge-Based Security for Dynamic PoliciesAslan Askarov, Stephen Chong · 2012 · IEEE Computer Security Foundations Workshop (CSFW)
- Epistemic temporal logic for information flow securityMusard Balliu, Mads Dam, Gurvan Le Guernic · 2011 · ACM Workshop on Programming Languages and Analysis for Security
- Symbolic quantitative information flowQuoc-Sang Phan, Pasquale Malacaria, Oksana Tkachuk, Corina S. Păsăreanu · 2012 · ACM SIGSOFT Software Engineering Notes
- Localized delimited releaseAslan Askarov, Andrei Sabelfeld · 2007 · ACM Workshop on Programming Languages and Analysis for Security
- Run-time principals in information-flow type systemsStephen Tse, Steve Zdancewic · 2004 · IEEE Symposium on Security and Privacy (S&P)
- The Shadow Knows: Refinement and security in sequential programsCarroll C. Morgan · 2009 · Science of Computer Programming
- Analyzing and defending against web-based malwareJian Chang, Krishna Kumar Venkatasubramanian, Andrew G. West, Insup Lee · 2013 · ACM Computing Surveys
- Dependent Information Flow TypesLuísa Lourenço, Luı́s Caires · 2014 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- Access Control Encryption for General Policies from Standard AssumptionsSam Kim, David J. Wu · 2017 · Lecture notes in computer science
- Cross-App Poisoning in Software-Defined NetworkingBenjamin E. Ujcich, Samuel Jero, Anne Edmundson, Qi Wang, Richard Skowyra, James W. Landry, Adam Bates, William H. Sanders, Cristina Nita-Rotaru, Hamed Okhravi · 2018 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- HyperFlowAndrew Ferraiuolo, Mark Zhao, Andrew C. Myers, G. Edward Suh · 2018 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- Monitoring Hyperproperties by Combining Static Analysis and Runtime VerificationBorzoo Bonakdarpour, César Sánchez, Gerardo Schneider · 2018 · Lecture notes in computer science
- History-Based Access Control with Local PoliciesMassimo Bartoletti, Pierpaolo Degano, Gian-Luigi Ferrari · 2005 · Lecture notes in computer science
- Deriving an information flow checker and certifying compiler for JavaGilles Barthe, David A. Naumann, Tamara Rezk · 2006 · IEEE Symposium on Security and Privacy (S&P)
- Leveraging Gate-Level Properties to Identify Hardware Timing ChannelsJason K. Oberg, Sarah Meiklejohn, Timothy Sherwood, Ryan Kastner · 2014 · IEEE Transactions on Computer-Aided Design of Integrated Circuits and Systems
- SoK: Practical Foundations for Software Spectre DefensesSunjay Cauligi, Craig Disselkoen, Daniel Moghimi, Gilles Barthe, Deian Stefan · 2022 · IEEE Symposium on Security and Privacy (S&P)
- End-to-end verification of information-flow security for C and assembly programsDavid Costanzo, Zhong Shao, Ronghui Gu · 2016 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Towards Safe and Secure Autonomous and Cooperative Vehicle EcosystemsAntonio Lima, Francisco Rocha, Marcus Völp, Paulo Verı́ssimo · 2016
- Foundations and applications of artificial Intelligence for zero-day and multi-step attack detectionPierre Parrend, Julio Navarro, Fabio Guigou, Aline Deruyver, Pierre Collet · 2018 · EURASIP Journal on Information Security
- QIF-Verilog: Quantitative Information-Flow based Hardware Description Languages for Pre-Silicon Security AssessmentXiaolong Guo, Raj Gautam Dutta, Jiaji He, Mark Mohammad Tehranipoor, Yier Jin · 2019 · IEEE International Symposium on Hardware Oriented Security and Trust (HOST)
- Managing Policy Updates in Security-Typed LanguagesNikhil Swamy, Michael Hicks, Stephen Tse, Steve Zdancewic · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- Application-level isolation and recovery with solitudeShvetank Jain, Fareha Shafique, Vladan Djeric, Ashvin Goel · 2008 · European Conference on Computer Systems
- Reactive non-interference for a browser modelNataliia Bielova, Dominique Devriese, Fabio Massacci, Frank Piessens · 2011 · International Conference on Network and System Security (NSS)
- Enforcing Information Flow Security Properties in Cyber-Physical Systems: A Generalized Framework Based on CompensationThoshitha T. Gamage, Bruce McMillin, Thomas P. Roth · 2010 · IEEE Annual Computer Software and Applications Conference Workshops (COMPSACW)
- Gradual Security Typing with ReferencesLuminous Fennell, Peter J. Thiemann · 2013 · IEEE Computer Security Foundations Workshop (CSFW)
- Automatically Extracting Threats from Extended Data Flow DiagramsBernhard Berger, Karsten Sohr, Rainer Koschke · 2016 · Lecture notes in computer science
- Controlling the What and Where of Declassification in Language-Based SecurityHeiko Mantel, Alexander Reinhard · 2007 · Lecture notes in computer science
- Decentralized RobustnessStephen Chong, Andrew C. Myers · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- Coverage guided, property based testingLampropoulos, Leonidas, Hicks, Michael, Pierce, Benjamin C. · 2019 · Proceedings of the ACM on Programming Languages
- A design and verification methodology for secure isolated regionsRohit Sinha, Manuel Costa, Akash Lal, Nuno P. Lopes, Sriram K. Rajamani, Sanjit Arunkumar Seshia, Kapil Vaswani · 2016 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Closing Internal Timing Channels by TransformationAlejandro Russo, John Hughes, David A. Naumann, Andrei Sabelfeld · 2007 · Lecture notes in computer science
- Run-time Monitoring and Formal Analysis of Information Flows in ChromiumLujo Bauer, Shaoying Cai, Limin Jia, Timothy Passaro, Michael Stroucken, Yuan Tian · 2015 · Network and Distributed System Security Symposium
- Formal verification of side-channel countermeasures using self-compositionJosé Bacelar Almeida, Manuel Barbosa, Jorge Sousa Pinto, Bárbara Vieira · 2011 · Science of Computer Programming
- On flow-sensitive security typesSebastian Hunt, David Sands · 2006 · ACM SIGPLAN Notices
- Using access control for secure information flow in a Java-like languageAnindya Banerjee, David A. Naumann · 2004 · IEEE Computer Security Foundations Workshop (CSFW)
- Survey on JavaScript security policies and their enforcement mechanisms in a web browserNataliia Bielova · 2013 · The Journal of Logic and Algebraic Programming
- Compositional Verification and Refinement of Concurrent Value-Dependent NoninterferenceToby Murray, Robert Sison, Edward Pierzchalski, Christine Rizkallah · 2016 · IEEE Computer Security Foundations Workshop (CSFW)
- Dijkstra monads for freeDanel Ahman, Cătălin Hriţcu, Kenji Maillard, Guido Martínez, Gordon D. Plotkin, Jonathan Protzenko, Aseem Rastogi, Nikhil Swamy · 2016 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- Provably Correct Runtime Enforcement of Non-interference PropertiesVenkat N. Venkatakrishnan, Wei Xu, Daniel C. DuVarney, R. Sekar · 2006 · Lecture notes in computer science
- Enforcing robust declassificationAndrew C. Myers, Andrei Sabelfeld, Steve Zdancewic · 2004 · IEEE Computer Security Foundations Workshop (CSFW)
- User-Input Dependence Analysis via Graph ReachabilityBernhard Scholz, Chenyi Zhang, Cristina Cifuentes · 2008 · IEEE International Working Conference on Source Code Analysis and Manipulation (SCAM)
- FaCT: A Flexible, Constant-Time Programming LanguageSunjay Cauligi, Gary Soeller, Fraser Brown, Brian Johannesmeyer, Yunlu Huang, Ranjit Jhala, Deian Stefan · 2017 · IEEE Cybersecurity Development (SecDev)
- Monitoring hyperpropertiesBernd Finkbeiner, Christopher Hahn, Marvin Stenger, Leander Tentrup · 2019 · Formal Methods in System Design
- From Coupling Relations to Mated Invariants for Checking Information FlowDavid A. Naumann · 2006 · Lecture notes in computer science
- From Languages to Systems: Understanding Practical Application Development in Security-typed LanguagesBoniface Hicks, Kiyan Ahmadizadeh, Patrick Drew McDaniel · 2006 · Annual Computer Security Applications Conference
- Measuring the strength of information flows in programsWes Masri, Andy Podgurski · 2009 · ACM Transactions on Software Engineering and Methodology
- Verifying and Synthesizing Constant-Resource Implementations with TypesVan Chan Ngo, Mario Dehesa-Azuara, Matt Fredrikson, Jan Hoffmann · 2017 · IEEE Symposium on Security and Privacy (S&P)
- Enforcing security and safety models with an information flow analysis toolRoderick Chapman, Adrian Hilton · 2004 · Annual ACM SIGAda International Conference on Ada (SIGAda)
- Information flow security in dynamic contextsRiccardo Focardi A, Sabina Rossi · 2006 · Journal of Computer Security
- Confidentiality Enforcement Using Dynamic Information Flow AnalysesDavid A. Schmidt, Anindya Banerjee, Gurvan Le Guernic · 2007 · K-State Research Exchange (Kansas State University)
- The Shadow Knows: Refinement of Ignorance in Sequential ProgramsCarroll C. Morgan · 2006 · Lecture notes in computer science
- Exploring and enforcing security guarantees via program dependence graphsAndrew Johnson, Lucas Waye, Scott Moore, Stephen Chong · 2015 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Faceted execution of policy-agnostic programsThomas H. Austin, Jean Yang, Cormac Flanagan A, Armando Solar-Lezama · 2013 · ACM Workshop on Programming Languages and Analysis for Security
- Type-Driven Gradual Security with ReferencesMatías Toro, Ronald Garcia, Éric Tanter · 2018 · ACM Transactions on Programming Languages and Systems
- Information Flow Security in Dynamic ContextsRiccardo Focardi A, Sabina Rossi · 1987
- A Type System for Computationally Secure Information FlowPeeter Laud, Varmo Vene · 2005 · Lecture notes in computer science
- Flaws in Flows: Unveiling Design Flaws via Information Flow AnalysisKatja Tuma, Riccardo Scandariato, Musard Balliu · 2019 · IEEE International Conference on Software Architecture (ICSA)
- Detecting violations of access control and information flow policies in data flow diagramsStephan Seifermann, Robert Heinrich, Dominik Werle, Ralf Reussner · 2021 · Journal of Systems and Software
- Securing script-based extensibility in web browsersVladan Djeric, Ashvin Goel · 2010
- User-aware privacy control via extended static-information-flow analysisXusheng Xiao, Nikolai Tillmann, Manuel A. Fähndrich, Jonathan de Halleux, Michał Moskal · 2012 · IEEE/ACM International Conference on Automated Software Engineering (ASE)
- Rewriting-Based Runtime Verification for Alternation-Free HyperLTLNoel Brett, Umair Siddique, Borzoo Bonakdarpour · 2017 · Lecture notes in computer science
- Proving differential privacy with shadow executionYuxin Wang, Zeyu Ding, Guanhong Wang, Daniel Kifer, Danfeng Zhang · 2019 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Practical Information-flow Control in Web-Based Information SystemsPeng Li, Steve Zdancewic · 2005 · IEEE Computer Security Foundations Workshop (CSFW)
- An improved slicer for JavaChristian Hammer, Gregor Snelting · 2004 · ACM SIGPLAN-SIGSOFT Workshop on Program Analysis for Software Tools and Engineering (PASTE)
- Secrecy in multiagent systemsJoseph Yehuda Halpern, K. O'Neill · 2003 · IEEE Computer Security Foundations Workshop (CSFW)
- Using Labeling to Prevent Cross-Service Attacks Against Smart PhonesCollin Mulliner, Giovanni Vigna, David Dagon, Wenke Lee B · 2006 · Lecture notes in computer science
- Static Analysis for Efficient Hybrid Information-Flow ControlScott Moore, Stephen Chong · 2011 · IEEE Computer Security Foundations Workshop (CSFW)
- A Type System for Observational DeterminismTachio Terauchi · 2008 · IEEE Computer Security Foundations Workshop (CSFW)
- Securing Timeout Instructions in Web ApplicationsAlejandro Russo, Andrei Sabelfeld · 2009 · IEEE Computer Security Foundations Workshop (CSFW)
- Secure Multi-execution: Fine-Grained, Declassification-Aware, and TransparentWillard Rafnsson, Andrei Sabelfeld · 2013 · IEEE Computer Security Foundations Workshop (CSFW)
- History-Based Access Control and Secure Information FlowAnindya Banerjee, David A. Naumann · 2005 · Lecture notes in computer science
- End-to-End Enforcement of Erasure and DeclassificationStephen Chong, Andrew C. Myers · 2008 · IEEE Computer Security Foundations Workshop (CSFW)
- Research communities in cyber security: A comprehensive literature reviewSotirios Katsikeas, Pontus Johnson, Mathias Ekstedt, Robert Lagerström · 2021 · Computer Science Review
- A Semantic Framework for Declassification and EndorsementAslan Askarov, Andrew C. Myers · 2010 · Lecture notes in computer science
- Automatically optimizing secure computationFlorian Kerschbaum · 2011 · ACM SIGSAC Conference on Computer and Communications Security (CCS)
- CassandraSteffen Lortz, Heiko Mantel, Artem Starostin, Timo Bähr, David Clayton Schneider, Alexandra Weber · 2014 · Security and Privacy in Smartphones and Mobile Devices
- Gate-Level Information Flow Tracking for Security LatticesWei Hu, Dejun Mu, Jason K. Oberg, Baolei Mao, Mohit Tiwari, Timothy Sherwood, Ryan Kastner · 2014 · ACM Transactions on Design Automation of Electronic Systems
- Automated Hypersafety VerificationAzadeh Farzan, Anthony Vandikas · 2019 · Lecture notes in computer science
- The next 700 relational program logicsKenji Maillard, Cătălin Hriţcu, Exequiel Rivas, Antoine Van Muylder · 2019 · Proceedings of the ACM on Programming Languages
- Data dependencies and program slicingIsabella Mastroeni, Damiano Zanardini · 2008 · ACM SIGPLAN Workshop on Partial Evaluation and Program Manipulation (PEPM)
- A Type System for Robust DeclassificationSteve Zdancewic · 2003 · Electronic Notes in Theoretical Computer Science
- Revizor: testing black-box CPUs against speculation contractsOleksii Oleksenko, Christof W. Fetzer, Boris Köpf, Mark Silberstein · 2022 · International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS)
- SMT-Based Verification of Software Countermeasures against Side-Channel AttacksHassan Eldib, Chao Wang, Patrick R. Schaumont · 2014 · Lecture notes in computer science
- A monadic analysis of information flow security with mutable stateKarl Crary, Aleksey Kliger, Frank Pfenning · 2005 · Journal of Functional Programming
- End-to-End Availability Policies and NoninterferenceLantian Zheng, Andrew C. Myers · 2005 · IEEE Computer Security Foundations Workshop (CSFW)
- On the Complexity of Generating Gate Level Information Flow Tracking LogicWei Hu, Jason K. Oberg, Ali Umut Irturk, Mohit Tiwari, Timothy Sherwood, Dejun Mu, Ryan Kastner · 2012 · IEEE Transactions on Information Forensics and Security
- Explicit Secrecy: A Policy for Taint TrackingDaniel Schoepe, Musard Balliu, Benjamin C. Pierce, Andrei Sabelfeld · 2016 · IEEE European Symposium on Security and Privacy