87 search results - page 4 / 18 » Direct static enforcement of high-level security policies |
CCS
2008
ACM
13 years 9 months ago
2008
ACM
This paper presents the first type system for statically analyzing security protocols that are based on zero-knowledge proofs. We show how several properties offered by zero-knowl...
ESORICS
2010
Springer
13 years 8 months ago
2010
Springer
Sun and the CERT recommend for secure Java development to not allow partially initialized objects to be accessed. The CERT considers the severity of the risks taken by not followin...
ACSAC
2007
IEEE
14 years 1 months ago
2007
IEEE
We have implemented an information flow framework for the Java Virtual Machine that combines static and dynamic techniques to capture not only explicit flows, but also implicit ...
POPL
2012
ACM
12 years 3 months ago
2012
ACM
It is becoming increasingly important for applications to protect sensitive data. With current techniques, the programmer bears the burden of ensuring that the application’s beh...
ICDCS
2002
IEEE
14 years 15 days ago
2002
IEEE
We present here the execution model of a policy-driven middleware for building secure distributed collaboration systems from their high level specifications. Our specification m...