This paper seeks to answer fundamental questions about trade-offs between static and
dynamic security analysis. It has been previously shown that flow-sensitive static information …

Protecting confidential data in computing environments has long been recognized as a
difficult and daunting problem. All modern operating systems include some form of access …

In recent years it has been shown that dynamic monitoring can be used to soundly enforce
information flow policies. For programs distributed in source or bytecode form, the use of just …

Abstract Information-flow control tracks how information propagates through the program
during execution to make sure that the program handles the information securely. Secure …

Historically, dynamic techniques are the pioneers of the area of information flow in the 70's.
In their seminal work, Denning and Denning suggest a static alternative for information-flow …

Verifying that programs trusted to enforce security actually do so is a practical concern for
programmers and administrators. However, there is a disconnect between the kinds of tools …

Although static systems for information flow security are well-studied, few works address run-
time information flow monitoring. Run-time information flow control offers distinct advantages …

Hybrid information-flow monitors use a combination of static analysis and dynamic
mechanisms to provide precise strong information security guarantees. However, unlike …

Abstract Information flow control (IFC) checks whether a program can leak secret data to
public ports, or whether critical computations can be influenced from outside. But many IFC …

Current standard security practices do not provide substantial assurance that the end-to-end
behavior of a computing system satisfies important security policies such as confidentiality …