Language-based information-flow security
Sabelfeld, A., Myers, A.C.·2003·IEEE Journal on Selected Areas in Communications
Cited by (1,001)
Items 501–600 of 1,001
- Modelling and analysing cognitive causes of security breachesRimvydas Rukšėnas, Paul Curzon, ANN E. BLANDFORD · 2008 · Innovations in Systems and Software Engineering
- Typing termination in a higher-order concurrent imperative languageGérard Boudol · 2010 · Information and Computation
- Taint Dependency Sequences: A Characterization of Insecure Execution Paths Based on Input-Sensitive Cause SequencesDumitru Ceara, Laurent Mounier, Marie-Laure Potet · 2010 · IEEE International Conference on Software Testing, Verification and Validation Workshops (ICSTW)
- Lattice priority scheduling: Low-overhead timing-channel protection for a shared memory controllerAndrew Ferraiuolo, Yao Wang, Danfeng Zhang, Andrew C. Myers, G. Edward Suh · 2016 · IEEE International Symposium on High-Performance Computer Architecture (HPCA)
- Self-adaptation and secure information flow in multiparty communicationsIlaria Castellani, Mariangiola Dezani-ciancaglini A, Jorge A. Pérez · 2016 · Formal Aspects of Computing
- A Calculus for Flow-Limited AuthorizationOwen Arden, Andrew C. Myers · 2016 · IEEE Computer Security Foundations Workshop (CSFW)
- Multiple Facets for Dynamic Information Flow with ExceptionsThomas H. Austin, Tommy Schmitz, Cormac Flanagan A · 2017 · ACM Transactions on Programming Languages and Systems
- Active learning of points-to specificationsOsbert Bastani, Rahul Sharma, Alex Aiken, Percy Liang · 2018 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Lazy Self-composition for Security VerificationWeikun Yang, Yakir Vizel, Pramod Subramanyan, Aarti Gupta, Sharad Malik · 2018 · Lecture notes in computer science
- Typing One-to-One and One-to-Many Correspondences in Security ProtocolsAndrew D. Gordon, Alan Jeffrey · 2003 · Lecture notes in computer science
- Security policy refinement and enforcement for the design of multi-level secure systemsJie Zhou, Jim Alves-Foss · 2008 · Journal of Computer Security
- Unwinding in Information Flow SecurityAnnalisa Bossi, Riccardo Focardi A, Damiano Macedonio, Carla Piazza, Sabina Rossi · 2004 · Electronic Notes in Theoretical Computer Science
- What You Lose is What You Leak: Information Leakage in Declassification PoliciesAnindya Banerjee, Roberto Giacobazzi, Isabella Mastroeni · 2007 · Electronic Notes in Theoretical Computer Science
- Decidability and proof systems for language-based noninterference relationsMads Dam · 2006 · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)
- Precisely Measuring Quantitative Information Flow: 10K Lines of Code and BeyondCelina G. Val, Michael A. Enescu, Sam Bayless, William A. Aiello, Alan J. Hu · 2016 · IEEE European Symposium on Security and Privacy
- Verifying relational properties using trace logicGilles Barthe, Renate Eilers, Pamina Georgiou, Bernhard Gleiss, Laura Kovács, Matteo Maffei · 2019 · Chalmers Research (Chalmers University of Technology)
- Reductions for safety proofsAzadeh Farzan, Anthony Vandikas · 2019 · Proceedings of the ACM on Programming Languages
- Verifying constant-time implementations by abstract interpretationSandrine Blazy, David Pichardie, Alix Trieu · 2018 · Journal of Computer Security
- Compositional information flow security for concurrent programsAnnalisa Bossi, Carla Piazza, Sabina Rossi · 2007 · Journal of Computer Security
- Enforcing Privacy Policies with Meta-CodeHåvard D. Johansen, Eleanor Birrell, Robbert van Renesse, Fred B. Schneider, Magnus Stenhaug, Dag Johansen · 2015 · Asia-Pacific Workshop on Systems
- Towards semantics for provenance securityStephen Chong · 2009
- Modelling declassification policies using abstract domain completenessIsabella Mastroeni, Anindya Banerjee · 2011 · Mathematical Structures in Computer Science
- Improving usability of information flow security in javaScott F. Smith, Mark Thober · 2007 · ACM Workshop on Programming Languages and Analysis for Security
- Towards a practical secure concurrent languageStefan K. Muller, Stephen Chong · 2012 · Conference on Object-Oriented Programming Systems, Languages, and Applications
- Verification of Information Flow Properties of Java Programs without ApproximationsChristoph Scheben, Peter H. Schmitt · 2012 · Lecture notes in computer science
- Security slicing for auditing XML, XPath, and SQL injection vulnerabilitiesJulian Thomé, Lwin Khin Shar, Lionel Briand · 2015 · Proceedings/Proceedings - International Symposium on Software Reliability Engineering
- Information-flow security for JavaScript and its APIsDaniel S. Hedin, Luciano Bello, Andrei Sabelfeld · 2016 · Journal of Computer Security
- Model Counting for Recursively-Defined StringsMinh-Thai Trinh, Duc-Hiep Chu, Joxan Jaffar · 2017 · Lecture notes in computer science
- Exploring and enforcing security guarantees via program dependence graphsAndrew Johnson, Lucas Waye, Scott Moore, Stephen Chong · 2015 · ACM SIGPLAN Notices
- Crafting a usable microkernel, processor, and I/O system with strict and provable information flow securityMohit Tiwari, Jason K. Oberg, Xun Li, Jonathan Valamehr, Timothy E. Levin, Ben Hardekopf, Ryan Kastner, Frederic T. Chong, Timothy Sherwood · 2011 · ACM SIGARCH Computer Architecture News
- Adjoining classified and unclassified information by abstract interpretationRoberto Giacobazzi, Isabella Mastroeni · 2010 · Journal of Computer Security
- Reconfigurable Data Processing for CloudsAnil Madhavapeddy, Satnam Singh · 2011 · IEEE International Symposium on Field-Programmable Custom Computing Machines (FCCM)
- A language for probabilistically oblivious computationDavid Darais, Ian Sweet, Chang Liu, Michael Hicks · 2019 · Proceedings of the ACM on Programming Languages
- Multilevel Security and Quality of ProtectionSimon N. Foley, Stefano Bistarelli, Barry O’Sullivan, John J. Herbert, Garret Swart · 2008 · Springer eBooks
- Super-sticky and declassifiable release policies for flexible information dissemination controlSruthi Bandhakavi, Charles C. Zhang, Marianne Winslett · 2006 · ACM Workshop on Privacy in the Electronic Society (WPES)
- Adaptive eager boolean encoding for arithmetic reasoning in verificationSanjit Arunkumar Seshia, Randal E. Bryant · 2005
- Scheduler-Specific Confidentiality for Multi-threaded Programs and Its Logic-Based VerificationMarieke Huisman, Tri Minh Ngo · 2012 · Lecture notes in computer science
- CoSMeDis: A Distributed Social Media Platform with Formally Verified Confidentiality GuaranteesThomas Bauereiß, Armando Pesenti Gritti, Andrei Popescu, Franco Raimondi · 2017 · IEEE Symposium on Security and Privacy (S&P)
- A monadic framework for relational verification: applied to information security, program equivalence, and optimizationsNiklas Grimm, Kenji Maillard, Cédric Fournet A, Cătălin Hriţcu, Matteo Maffei, Jonathan Protzenko, Tahina Ramananandro, Aseem Rastogi, Nikhil Swamy, Santiago Zanella-Béguelin · 2017 · ACM SIGPLAN International Conference on Certified Programs and Proofs (CPP)
- Trends in Relational Program VerificationBernhard Beckert, Mattias Ulbrich · 2018 · Springer eBooks
- Overview of Opacity in Discrete Event SystemsYe Guo, Xiaoning Jiang, Guo Chen, Shouguang Wang, Oussama Karoui · 2020 · IEEE Access
- Avengers, Assemble! Survey of WebAssembly Security SolutionsMinseo Kim, Hyerean Jang, Youngjoo Shin · 2022 · IEEE ... International Conference on Cloud Computing
- Transforming Abstract Interpretations by Abstract InterpretationRoberto Giacobazzi, Isabella Mastroeni · 2008 · Lecture notes in computer science
- Abstract Dependences for Alarm DiagnosisXavier Rival · 2005 · Lecture notes in computer science
- Automatic Detection of Information Leakage Vulnerabilities in Browser ExtensionsRui Zhao, Chuan Yue, Qing Yi · 2015 · International World Wide Web Conference (WWW)
- Downgrading policies and relaxed noninterferencePeng Li, Steve Zdancewic · 2005 · ACM SIGPLAN Notices
- Eliminating Implicit Information Leaks by Transformational Typing and UnificationBoris Köpf, Heiko Mantel · 2006 · Lecture notes in computer science
- Abstract Interpretation of Symbolic Execution with Explicit State UpdatesRichard Bubel, Reiner Hähnle, Benjamin Weiß · 2009 · Lecture notes in computer science
- Self-stabilizing JavaYong hun Eom, Brian Charles Demsky · 2012 · ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI)
- Formal Analysis of Language-Based Android Security Using Theorem Proving ApproachWilayat Khan, Muhammad Kamran, Aakash Ahmad, Farrukh Aslam Khan, Abdelouahid Derhab · 2019 · IEEE Access
- An Algebra of Alignment for Relational VerificationTimos Antonopoulos, Eric Koskinen, Ton Chanh Le, Ramana Nagasamudram, David A. Naumann, Minh Ngo · 2023 · Proceedings of the ACM on Programming Languages
- Auditing Workflow Executions against Dataflow PoliciesRafael Accorsi, Claus Wonnemann · 2010 · Lecture notes in business information processing
- Data Sandboxing: A Technique for Enforcing Confidentiality PoliciesTejas Khatiwala, Raj Swaminathan, Venkat N. Venkatakrishnan · 2006 · Annual Computer Security Applications Conference
- Limiting information leakage in event-based communicationWillard Rafnsson, Andrei Sabelfeld · 2011 · ACM Workshop on Programming Languages and Analysis for Security
- Testing noninterference, quicklyCĂTĂLIN HRIŢCU, LEONIDAS LAMPROPOULOS, ANTAL SPECTOR-ZABUSKY, ARTHUR AZEVEDO DE AMORIM, MAXIME DÉNÈS, JOHN HUGHES, Benjamin C. Pierce, DIMITRIOS VYTINIOTIS · 2016 · Journal of Functional Programming
- Practical Specification of Belief Manipulation in GamesMarkus Eger, Chris Martens · 2021 · Proceedings of the AAAI Conference on Artificial Intelligence and Interactive Digital Entertainment
- Datacentric Semantics for Verification of Privacy Policy Compliance by Mobile ApplicationsAgostino Cortesi, Pietro Ferrara, Marco Pistoia, Omer Tripp · 2014 · Lecture notes in computer science
- Secure data preservers forweb servicesJayanthkumar Kannan, Petros Maniatis, Byung-Gon Chun · 2011 · USENIX conference on Web application development
- Taint Analysis of Security Code in the KLEE Symbolic Execution EngineRicardo Corin, Felipe Andrés Manzano · 2012 · Lecture notes in computer science
- PRECIP: Towards Practical and Retrofittable Confidential Information Protection.Xiaofeng Wang, Zhuowei Li, Ninghui Li, Jong Youl Choi · 2008
- A Methodology for Information Flow ExperimentsMichael Carl Tschantz, Amit Jyoti Datta, Anupam Datta, Jeannette M. Wing · 2015 · IEEE Computer Security Foundations Workshop (CSFW)
- Linear dependent types in a call-by-value scenarioUgo Dal Lago, Barbara Petit · 2012 · International Symposium on Principles and Practice of Declarative Programming (PPDP)
- A security domain model to assess software for exploitable covert channelsAlan Shaffer, Mikhail Auguston, Cynthia E. Irvine, Timothy E. Levin · 2008 · ACM Workshop on Programming Languages and Analysis for Security
- Noninterference in the Presence of Non-Opaque PointersDaniel S. Hedin, David Sands · 2006 · IEEE Computer Security Foundations Workshop (CSFW)
- An user configurable clang static analyzer taint checkerMarcelo Arroyo, Francisco Chiotta, Francisco Bavera · 2016 · International Conference of the Chilean Computer Science Society (SCCC)
- Security-Aware Refactoring Alerting its Impact on Code VulnerabilitiesKatsuhisa Maruyama, 健祐 戸子田 · 2008 · Asia-Pacific Software Engineering Conference (APSEC)
- Efficient type inference for secure information flowKatia Hristova, Tom Rothamel, Yanhong A. Liu, Scott D. Stoller · 2006 · ACM Workshop on Programming Languages and Analysis for Security
- On the Definition and Policies of ConfidentialityJohs Hansen Hammer, Gerardo Schneider · 2007 · International Conference on Information Assurance and Security (IAS)
- Dynamic label binding at run-timeYolanta Beres, Chris I. Dalton · 2003 · New Security Paradigms Workshop
- Sécurité des protocoles cryptographiques : décidabilité et complexitéMathieu Turuani · 2003 · Publications Et Travaux Academiques de Lorraine (Universite de Lorraine)
- Secure multi-execution of web scripts: Theory and practiceWillem De Groef, Dominique Devriese, Nick Nikiforakis, Frank Piessens · 2014 · Journal of Computer Security
- Capabilities for information flowArnar Birgisson, Alejandro Russo, Andrei Sabelfeld · 2011 · ACM Workshop on Programming Languages and Analysis for Security
- MAC A verified static information-flow control libraryMarco Vassena, Alejandro Russo, Pablo Buiras, Lucas Waye · 2017 · Journal of Logical and Algebraic Methods in Programming
- Automated Proof of Bell–LaPadula Security PropertiesMaximiliano Cristiá, Gianfranco Rossi · 2020 · Journal of Automated Reasoning
- A Design and Verification Methodology for a TrustZone Trusted Execution EnvironmentHaiyong Sun, Hang Lei · 2020 · IEEE Access
- Static checking of GDPR-related privacy compliance for object-oriented distributed systemsShukun Tokas, Olaf Owe, Toktam Ramezanifarkhani · 2021 · Journal of Logical and Algebraic Methods in Programming
- Pervasive binding of labels to system processesFlorian Buchholz, Eugene Howard Spafford · 2005
- Proving Concurrent NoninterferenceAndrei Popescu, Johannes Hölzl, Tobias Nipkow · 2012 · Lecture notes in computer science
- Combining Different Proof Techniques for Verifying Information Flow SecurityHeiko Mantel, Henning Sudbrock, Tina Kraußer · 2007 · Springer eBooks
- On Dynamic Flow-Sensitive Floating-Label SystemsPablo Buiras, Deian Stefan, Alejandro Russo · 2014 · IEEE Computer Security Foundations Workshop (CSFW)
- Typing access control and secure information flow in sessionsSara Capecchi, Ilaria Castellani, Mariangiola Dezani-ciancaglini A · 2014 · Information and Computation
- Tailoring Taint Analysis to GDPRPietro Ferrara, Luca Olivieri, Fausto Spoto · 2018 · Lecture notes in computer science
- MrCryptSai Deep Tetali, Mohsen Lesani, Rupak Majumdar, Todd D. Millstein · 2013 · ACM SIGPLAN Notices
- Bridging Model-Based and Language-Based SecurityRogardt Heldal, Fredrik Hultin · 2003 · Lecture notes in computer science
- Abstract Semantic DependencyPatrick M. Cousot · 2019 · Lecture notes in computer science
- QMS: Evaluating the side-channel resistance of masked software from source codeHassan Eldib, Chao Wang, Mostafa M. I. Taha, Patrick R. Schaumont · 2014 · ACM/IEEE Design Automation Conference (DAC)
- Timing-Sensitive Information Flow Analysis for Synchronous SystemsBoris Köpf, David Basin · 2006 · Lecture notes in computer science
- Proving Abstract Non-interferenceRoberto Giacobazzi, Isabella Mastroeni · 2004 · Lecture notes in computer science
- Symmetric behavior-based trustVivek Haldar, Michael Franz · 2005 · New Security Paradigms Workshop
- Qualitative and quantitative information flow analysis for multi-threaded programsTri Minh Ngo · 2014
- Information Flow Analysis via Path Condition RefinementMana Taghdiri, Gregor Snelting, Carsten Sinz · 2011 · Lecture notes in computer science
- Encoding information flow in AuraLimin Jia, Steve Zdancewic · 2009 · ACM Workshop on Programming Languages and Analysis for Security
- Practical Fine-Grained Information Flow Control Using LaminarDonald E. Porter, Michael D. Bond, Indrajit Roy, Kathryn S. McKinley, Emmett Witchel · 2014 · ACM Transactions on Programming Languages and Systems
- Imprecise securityWei Hu, Andrew Becker, Armita Ardeshiricham, Yu Tai, Paolo Ienne, Dejun Mu, Ryan Kastner · 2016
- We Are Family: Relating Information-Flow TrackersMusard Balliu, Daniel Schoepe, Andrei Sabelfeld · 2017 · Lecture notes in computer science
- Encoding DCC in HaskellMaximilian Algehed, Alejandro Russo · 2017 · ACM Workshop on Programming Languages and Analysis for Security
- Using Information Flow to Design an ISA that Controls Timing ChannelsDrew Zagieboylo, G. Edward Suh, Andrew C. Myers · 2019 · IEEE Computer Security Foundations Workshop (CSFW)
- Information Flow Analysis for Valued-Indexed Data Security CompartmentsLuísa Lourenço, Luı́s Caires · 2014 · Lecture notes in computer science
- Information Flow TestingGurvan Le Guernic · 2007 · Lecture notes in computer science
- Static Information Flow Analysis of Workflow Models.Rafael Accorsi, Claus Wonnemann · 2010