Abstract Information-flow control tracks how information propagates through the program
during execution to make sure that the program handles the information securely. Secure …

This paper studies the problem of securing information release in dynamic languages. We
propose (i) an intuitive framework for information-release policies expressing both what can …

This paper provides a way to specify expressive declassification policies, in particular, when,
what, and where policies that include conditions under which downgrading is allowed …

Protecting confidentiality of data has become increasingly important for computing systems.
Information-flow techniques have been developed over the years to achieve that purpose …

Industries and governments are increasingly compelled by regulations and public pressure
to handle sensitive information responsibly. Regulatory requirements and user expectations …

In the context of secure information flow, security policies express the classification and
declassification of data. Existing policy frameworks are tightly linked to a programming …

Non-interference happens when some elements of a dynamic system do not interfere, ie, do
not affect, other elements in the same system. Originally introduced in language-based …

We propose a novel mechanism for enforcing information flow policies with support for
declassification on event-driven programs. Declassification policies consist of two functions …

We present a domain-specific programming language for Secure Multiparty Computation
(SMC). Information is a resource of vital importance and considerable economic value to …

A web mashup is a web application that integrates content from different providers to create
a new service, not offered by the content providers. As mashups grow in popularity, the …