- On-the-fly Inlining of Dynamic Security Monitors,
with Jonas Magazinius and Alejandro Russo. In Computers &
Security, Elsevier, to appear.
- Decentralized Delimited Release, with
Jonas Magazinius and Aslan Askarov. In Proceedings of the Asian
Symposium on Programming Languages and Systems (APLAS),
Kenting, Taiwan, December 2011. LNCS,
Springer-Verlag.
-
Multi-run security,
with Arnar Birgisson.
In Proceedings of the
European Symposium on Research in Computer Security
(ESORICS), Leuven, Belgium, September 2011, LNCS,
Springer-Verlag.
- A Perspective on Information-Flow Control, with
Daniel Hedin. In Proceedings of the 2011
Marktoberdorf Summer School, IOS Press.
-
Capabilities for information flow,
with Arnar Birgisson and Alejandro Russo. In ACM SIGPLAN
Workshop on Programming Languages and Analysis for Security,
San Jose, CA, June 2011.
-
Limiting Information Leakage in Event-based Communication,
with Willard Rafnsson. In ACM SIGPLAN
Workshop on Programming Languages and Analysis for Security,
San Jose, CA, June 2011.
-
Unifying Facets of Information Integrity,
with Arnar Birgisson and Alejandro Russo. In Proceedings of the International Conference on Information Systems Security (ICISS), Gandhinagar, India, December
2010, LNCS, Springer-Verlag.
- On-the-fly Inlining of Dynamic Security
Monitors,
with Jonas Magazinius and Alejandro Russo. In Proceedings of the
IFIP International Information Security Conference (SEC), Brisbane, Australia, September 2010.
- Dynamic vs. Static Flow-Sensitive Security Analysis, with Alejandro Russo. In Proceedings of the
IEEE Computer Security Foundations Symposium,
Edinburgh, UK, July 17-19, 2010. IEEE
Computer Society Press.
- Security of Multithreaded Programs by Compilation, with
Gilles Barthe, Tamara Rezk, and Alejandro Russo. In ACM Transactions on Information and System Security. 13:3(21:1--21:32), July 2010.
- Securing Class Initialization,
with Keiko
Nakata. In Proceedings of the IFIP International
Conference on Trust Management (IFIPTM), Morioka, Iwate,
Japan, June 2010, LNCS, Springer-Verlag.
- A Lattice-based Approach to Mashup Security, with
Jonas Magazinius and Aslan Askarov. In Proceedings of the ACM
Symposium on Information, Computer and Communications Security
(ASIACCS), Beijing, China, April 2010.
- Tracking Information Flow in Dynamic Tree Structures, with
Alejandro Russo and Andrey Chudnov. In Proceedings of the
European Symposium on Research in Computer Security
(ESORICS), Saint Malo, France, September 2009, LNCS,
Springer-Verlag.
- Implicit flows in malicious and nonmalicious code, with
Alejandro Russo and Keqin Li. In Proceedings of the 2009
Marktoberdorf Summer School, IOS Press.
- Securing Interaction
between Threads and the Scheduler in the
Presence of Synchronization, with Alejandro Russo. In
Journal of Logic and Algebraic Programming, 78:7(593-618), Elsevier,
August 2009.
- Securing Timeout Instructions in Web Applications, with Alejandro Russo. In Proceedings of the
IEEE Computer Security Foundations Symposium,
Port Jefferson, NY, July 8-10, 2009. IEEE
Computer Society Press.
- Tight Enforcement of
Information-Release Policies for Dynamic Languages, with Aslan Askarov. In Proceedings of the
IEEE Computer Security Foundations Symposium,
Port Jefferson, NY, July 8-10, 2009. IEEE
Computer Society Press.
- From dynamic to static and
back: Riding the roller coaster of information-flow control
research, with Alejandro Russo. In Proceedings of Andrei
Ershov International Conference on Perspectives of System
Informatics, Akademgorodok, Novosibirsk, Russia, June 15-19,
2009. LNCS 5947, Springer-Verlag.
- Catch Me If You Can: Permissive Yet
Secure Error Handling, with Aslan Askarov. In ACM SIGPLAN
Workshop on Programming Languages and Analysis for Security,
Dublin, Ireland, June 2009.
- Declassification:
Dimensions and Principles, with David Sands. Journal of
Computer Security, 17:5(517-548), IOS
Press. Accepted: December 2006; Final version: February 2007; Publication: January 2009.
- Termination-Insensitive Noninterference Leaks More Than Just a Bit, with
Aslan Askarov, Sebastian Hunt, and David Sands. In Proceedings of the
13th European Symposium on Research in Computer Security
(ESORICS), Malaga, Spain, October 2008, LNCS 5283,
Springer-Verlag.
- Cryptographically-Masked Flows, with Aslan Askarov and Daniel
Hedin.
In Theoretical Computer Science, 402(2-3):82-101, August
2008, Elsevier.
- Closing Internal Timing Channels by Transformation, with
Alejandro Russo, John Hughes, and David Naumann.
In Proceedings of the 11th Annual Asian Computing Science
Conference,
Tokyo, Japan, December 6-8, 2006, Revised Selected Papers, LNCS 4435, Springer-Verlag. January 2008.
- Security of Multithreaded Programs by Compilation, with
Gilles Barthe, Tamara Rezk, and Alejandro Russo. In Proceedings of the
12th European Symposium on Research in Computer Security
(ESORICS), Dresden, Germany, September 24-26, 2007, LNCS 4734,
Springer-Verlag.
- Localized Delimited Release: Combining the What and Where Dimensions of Information Release, with Aslan Askarov. In
ACM SIGPLAN Workshop on
Programming Languages and Analysis for Security, San Diego,
California, June 14, 2007.
- Gradual Release: Unifying Declassification, Encryption
and Key Release Policies, with Aslan Askarov. In
Proceedings of the IEEE Symposium on Security
and Privacy, Berkeley/Oakland, California, May 20-23, 2007.
- Cryptographically-Masked Flows, with Aslan Askarov and Daniel
Hedin.
In Proceedings of the International Static Analysis Symposium,
Seoul, Korea, August 29-31, 2006. LNCS 4134, Springer-Verlag.
- Securing Interaction between Threads and the Scheduler, with Alejandro Russo. In Proceedings of the
19th IEEE Computer Security Foundations Workshop,
Venice, Italy, July 5-7, 2006. IEEE
Computer Society Press.
- Security for Multithreaded Programs under Cooperative
Scheduling, with Alejandro Russo. In Proceedings of Andrei
Ershov International Conference on Perspectives of System
Informatics, Akademgorodok, Novosibirsk, Russia, June 27-30,
2006. LNCS 4378, Springer-Verlag.
- Enforcing Robust Declassification and Qualified Robustness, with Andrew C. Myers and
Steve Zdancewic. Journal of Computer Security, 14(2):157-196, IOS
Press, May 2006.
- Security-typed languages for implementation of cryptographic protocols: A case study, with Aslan Askarov. In Proceedings of the
10th European Symposium on Research in Computer Security
(ESORICS), Milan, Italy, September 12-14, 2005, LNCS,
Springer-Verlag, September 2005.
- Dimensions and Principles of
Declassification, with David Sands. In Proceedings of the
18th IEEE Computer Security Foundations Workshop,
Aix-en-Provence, France, June 20-22, 2005. IEEE
Computer Society Press.
- Bridging Language-Based and Process Calculi Security, with
Riccardo Focardi and Sabina Rossi. In Proceedings of Foundations of Software Science and Computation Structures
(FOSSACS'05), pages 299-315, Edinburgh, Scotland, April 2-8, 2005, LNCS 3441,
Springer-Verlag.
Full version available as Bridging
Language-Based and Process Calculi Security, Technical Report, CS-2004-14, University
of Venice, December 2004.
- A Model for Delimited Information Release, with Andrew
C. Myers. In Proceedings of the 2003 International Symposium on
Software Security (ISSS'03), pages 174-191, Tokyo, Japan, November 4-6,
2003. LNCS 3233, Springer-Verlag. October 2004.
- Enforcing Robust Declassification, with Andrew C. Myers and
Steve Zdancewic. In Proceedings of the 17th IEEE Computer Security Foundations Workshop, Pacific Grove, California, June 28-30, 2004. IEEE
Computer Society Press.
- A
Unifying Approach to the Security of Distributed and Multi-Threaded
Programs, with Heiko Mantel. Journal of Computer Security,
11(4):615-676, IOS Press, September 2003.
- Confidentiality
for Multithreaded Programs via Bisimulation. In Proceedings of Andrei
Ershov 5th International Conference on Perspectives of System
Informatics, Akademgorodok, Novosibirsk, Russia, July 9-12, 2003. LNCS
2890, Springer-Verlag.
- Language-Based
Information-Flow Security (ps, pdf) with Andrew C.
Myers. IEEE
Journal on Selected Areas in Communications, 21(1):5-19, January 2003.
This is a survey article on language-based techniques for the
specification and enforcement of confidentiality properties. The BibTeX file
with references made in the survey is available here.
- Static
Confidentiality Enforcement for Distributed Programs, with Heiko Mantel.
In Proceedings of the 9th International Static Analysis Symposium,
Madrid, Spain, September 17-20, 2002. LNCS 2477, Springer-Verlag.
- The Impact
of Synchronisation on Secure Information Flow in Concurrent Programs. In
Proceedings of Andrei Ershov 4th International Conference on Perspectives
of System Informatics, Akademgorodok, Novosibirsk, Russia, July 3-6,
2001. LNCS 2244, Springer-Verlag.
- A
Generic Approach to the Security of Multi-threaded Programs, with Heiko
Mantel. In Proceedings of the 14th IEEE Computer Security Foundations
Workshop, Cape Breton, Nova Scotia, Canada, June 11-13, 2001. IEEE
Computer Society Press.
- Semantic
Models for the Security of Sequential and Concurrent Programs. (ps-file
size: 2M). PhD Thesis, Chalmers University of Technology and University of
Gothenburg, May 2001. Defended in June 2001.
- A Per Model of Secure
Information Flow in Sequential Programs, with David Sands.
Higher-Order and Symbolic Computation, 14(1):59-91, March 2001.
- Probabilistic
Noninterference for Multi-threaded Programs, with David Sands. In
Proceedings of the 13th IEEE Computer Security Foundations Workshop,
Cambridge, England, July 2000. IEEE Computer Society Press.
- Semantics-based
Security and Aspects of Program Analysis. (ps-file size: 2M) Licentiate
Thesis, Chalmers University of Technology and University of Gothenburg, March
2000.
- A Per Model of Secure
Information Flow in Sequential Programs, with David Sands. In
Proceedings of the 8th European Symposium on Programming, ESOP'99,
LNCS 1576, pages 40-58, Amsterdam, March 1999, Springer-Verlag.
- Simple Semantic
Analysis Problems for Functional Programs, with Viktor Sabelfeld. In
Proceedings of the 1997 ACM SIGPLAN International Conference on Functional
Programming, Amsterdam, June 1997. ACM Press.
- Equivalent
Transformations of Recursive Schemes with Finite Unfolding, with Viktor
Sabelfeld. Programming and Computer Software, 23 (2):70-77, 1997.
- Correct
Transformations of Logic Programs. Joint Bulletin of Novosibirsk
Computer Center and the Institute of Informatics Systems, 5:55-67, 1996.
|