Current standard security practices do not provide substantial assurance that the end-to-end
behavior of a computing system satisfies important security policies such as confidentiality …

Abstract Information-flow control tracks how information propagates through the program
during execution to make sure that the program handles the information securely. Secure …

This paper presents secure program partitioning, a language-based technique for protecting
confidential data during computation in distributed systems containing mutually untrusted …

We consider a sequential object-oriented language with pointers and mutable state, private
fields and classbased visibility, dynamic binding and inheritance, recursive classes, casts …

Access control mechanisms are often used with the intent of enforcing confidentiality and
integrity policies, but few rigorous connections have been made between information flow …

Our society's widespread dependence on networked information systems for everything from
personal finance to military communications makes it essential to improve the security of …

A challenging unsolved security problem is how to specify and enforce system-wide security
policies; this problem is even more acute in distributed systems with mutual distrust. This …

When complex systems are constructed from simpler components it is important to know
how properties of the components behave under composition. We present various …

Separation kernels are fundamental software of safety and security-critical systems, which
provide their hosted applications with spatial and temporal separation as well as controlled …

This paper presents secure program partitioning, a language-based technique for protecting
confidential data during computation in distributed systems containing mutually untrusted …