Reproducibility is crucial to the advancement of science; it strengthens confidence in
seemingly contradictory results and expands the boundaries of known discoveries …

Retrospective security has become increasingly important to the theory and practice of cyber
security, with auditing a crucial component of it. However, in systems where auditing is used …

While we have long had principles describing how access control enforcement should be
implemented, such as the reference monitor concept, imprecision in access control …

Audit logging provides post-facto analysis of runtime behavior for different purposes,
including error detection, amelioration of system operations, and the establishment of …

The major goal of this dissertation is to enhance software security by provably correct
enforcement of in-depth policies. In-depth security policies allude to heterogeneous …

Safety and security are two risk-driven aspects that are usually tackled separately. The
importance of considering safety and security as inter-dependent aspects is highlighted in …

Audit logging provides post-facto analysis of runtime behavior for different purposes,
including error detection, amelioration of system operations, and the establishment of …

The insider threat arises when an employee in an organization abuses their permissions to
harm the security of the organization's information system. The insider threat has be-come …

Auditing has become increasingly important to the theory and practice of cyber security.
However, in systems where auditing is used, programs are typically instrumented to …

The structure and behavior of organizations can be learned by mining the event logs of the
information systems they manage. This supports numerous applications, such as inferring …