Shared memory concurrency is pervasive in modern programming, including in systems that
must protect highly sensitive data. Recently, verification has finally emerged as a practical …

We consider the automatic verification of information flow security policies of web-based
workflows, such as conference submission systems like EasyChair. Our workflow description …

We consider the problem of specifying and proving the security of non-trivial, concurrent
programs that intentionally leak information. We present a method that decomposes the …

Relational properties describe multiple runs of one or more programs. They characterize
many useful notions of security, program refinement, and equivalence for programs with …

Methods for proving that concurrent software does not leak its secrets has remained an
active topic of research for at least the past four decades. Despite an impressive array of …

Given recent high-profile successes in formal verification of security-related properties (eg,
for seL4), and the rising popularity of applying formal methods to cryptographic libraries and …

Cloud computing is now used by many enterprises due to its increased computational
efficiency, economic effectiveness, as well as flexibility. However, security is currently the …

We propose the use of modern proof assistants to specify, implement, and verify password
quality checkers. We use the proof assistant Coq, focusing on Linux PAM, a widely-used …

This paper describes progress with our agenda of formal verification of information flow
security for realistic systems. We present CoSMed, a social media platform with verified …

Our goal is to certify absence of information leaks in multi-agent workflows, such as
conference management systems like EasyChair. These workflows can be executed by any …