53 search results - page 1 / 11 » Towards a Type System for Security APIs |
IFIP
2009
Springer
14 years 4 months ago
2009
Springer
Security API analysis typically only considers a subset of an API’s functions, with results bounded by the number of function calls. Furthermore, attacks involving partial leakag...
ESORICS
2009
Springer
14 years 10 months ago
2009
Springer
We examine some known attacks on the PIN verification framework, based on weaknesses of the security API for the tamperresistant Hardware Security Modules used in the network. We s...
CSFW
2012
IEEE
11 years 11 months ago
2012
IEEE
—Tracking information flow in dynamic languages remains an important and intricate problem. This paper makes substantial headway toward understanding the main challenges and res...
ESOP
2005
Springer
14 years 2 months ago
2005
Springer
JavaScript is a popular language for client-side web scripting. It has a dubious reputation among programmers for two reasons. First, many JavaScript programs are written against a...
CSFW
2008
IEEE
14 years 3 months ago
2008
IEEE
Early work on security-typed languages required that legal information flows be defined statically. More recently, techniques have been introduced that relax these assumptions a...