Links

The following are links to useful resources related to language-based security research, projects, and tools.

Language-based Security Resources

• George Necula's Proof-Carrying Code Webpage at U.C. Berkeley (verification for mobile x86 code)
• Cornell's Typed Assembly Language Page (type-safety for x86 assembly language)
• The open-source AspectJ Webpage (Aspected-Oriented Programming for Java)
• Princeton's Polymer Project (composable security policies for Java In-lined Reference Monitors)
• David Wagner's MOPS Project at U.C. Berkeley (model-checking for Java)
• The JavaMOP Project at U. Illinois at Urbana-Champaign (Monitoring-Oriented Programming for Java)
• U. Penn's JavaMaC Webpage (Monitoring-and-Checking framework for Java and C)
• Microsoft's Fugue Project (protocol checking for .NET)
• Microsoft's Vault Project (a C-like programming language for reliable systems)
• Microsoft's .NET Generics Project (generic types for .NET CIL)
  • Microsoft's AbstractIL Toolkit (OCaml/F# libraries used to develop .NET Generics)
  • Microsoft's F# Programming Language (a high-level ML-like language for .NET)
• Stephen McCamant's PittSFIeld Project at MIT (Software Fault Isolation for CISC architectures)
• Chris Small's MiSFIT Page (early work on SFI for x86)
• David Evan's Naccio Project at U. Virginia (early work on IRM's for x86/Java)
• Cornell's Jif Language: Java + Information Flow

Homepages of some Language-based Security Researchers

• Úlfar Erlingsson (Microsoft Research)
• Andrew D. Gordon (Microsoft Research, Cambridge)
• Peter Lee (Carnegie Mellon University)
• Greg Morrisett (Harvard University)
• Andrew C. Myers (Cornell University)
• George C. Necula (University of California at Berkeley)
• Fred B. Schneider (Cornell University)
• Christian Skalka (University of Vermont)
• Don Syme (Microsoft Research, Cambridge)
• David Wagner (University of California at Berkeley)
• David Walker (Princeton University)
• Steve Zdancewic (University of Pennsylvania)