120 search results - page 24 / 24 » Refactoring programs to secure information flows |
PLDI
2009
ACM
13 years 11 months ago
2009
ACM
Taint analysis, a form of information-flow analysis, establishes whether values from untrusted methods and parameters may flow into security-sensitive operations. Taint analysis...
SACMAT
2009
ACM
13 years 11 months ago
2009
ACM
Modern operating systems primarily use Discretionary Access Control (DAC) to protect files and other operating system resources. DAC mechanisms are more user-friendly than Mandat...
EUROSYS
2009
ACM
14 years 1 months ago
2009
ACM
This paper evaluates pointer tainting, an incarnation of Dynamic Information Flow Tracking (DIFT), which has recently become an important technique in system security. Pointer tai...
DSN
2004
IEEE
13 years 8 months ago
2004
IEEE
The authors describe the use of bounded model checking (BMC) for verifying Web application code. Vulnerable sections of code are patched automatically with runtime guards, allowin...
ICSE
2008
IEEE-ACM
14 years 5 months ago
2008
IEEE-ACM
Web applications support many of our daily activities, but they often have security problems, and their accessibility makes them easy to exploit. In cross-site scripting (XSS), an...