Validating the network paths taken by packets is critical in constructing a secure Internet
architecture. Any feasible solution must both enforce packet forwarding along end-host …

We present the design, implementation, and verification of XMHF-an eXtensible and
Modular Hypervisor Framework. XMHF is designed to achieve three goals--modular …

The idea of building secure systems by plugging together" secure''components is appealing,
but this requires a definition of security which, in addition to taking care of top-level security …

Object capabilities are a technique for fine-grained privilege separation in programming
languages and systems, with important applications in security. However, current formal …

Adversarial computations are a widely studied class of computations where resource-
bounded probabilistic adversaries have access to oracles, ie, probabilistic procedures with …

Auditing system logs is an important means of ensuring systems' security in situations where
run-time security mechanisms are not sufficient to completely prevent potentially malicious …

The diffusion of service-based and cloud-based systems has created a scenario where
software is often made available as services, offered as commodities over corporate …

Validating network paths taken by packets is critical for a secure Internet architecture. Any
feasible solution must both enforce packet forwarding along endhost-specified paths and …

A secure routing infrastructure is vital for secure and reliable Internet services. Source
authentication and path validation are two fundamental primitives for building a more secure …

A unified view of a wide range of adversary classes and composition principles for
reasoning about security properties of systems are cornerstones of a science of security …