We give a rigorous characterization of what it means for a programming language to be
memory safe, capturing the intuition that memory safety supports local reasoning about …

Many important security problems in JavaScript, such as browser extension security,
untrusted JavaScript libraries and safe integration of mutually distrustful websites (mash …

A core, but often neglected, aspect of a programming language design is its memory
(consistency) model. Sequential consistency~(SC) is the most intuitive memory model for …

We present the foundations for a new dynamic information flow control (IFC) parallel runtime
system, LIO _ PAR. To our knowledge, LIO _ PAR is the first dynamic language-level IFC …

Programmers routinely trade space for time to increase performance, often in the form of
caching or memoization. In managed languages like Java or JavaScript, however, this …

Language-based information-flow control (IFC) techniques often rely on special purpose, ad-
hoc primitives to address different covert channels that originate in the runtime system …

A decentralized system is a distributed system that operates under multiple, distinct spheres
of authority in which collaboration among the principals is characterized by mutual distrust …

Abstract Information Flow Control (IFC) is a principled approach to protecting the
confidentiality and integrity of data in software systems. Intuitively, IFC systems associate …

Large-scale private user data theft has become a common occurrence on the web. A huge
factor in these privacy breaches is that developers specify and enforce data security policies …

Kernel probes allow code to be inserted into a running operating system kernel to gather
information for debugging or profiling. Inserting code into the kernel raises a number of …