Today's software systems tend to be long-living and often process security-critical data, so
keeping up with ever-changing security measures, attacks, and mitigations is critical to …

During the development of security-critical software, the system implementation must
capture the security properties postulated by the architectural design. This paper presents …

Enforcement of security properties by Operating Systems is an open problem. To the best of
our knowledge, the solution presented in this paper1 is the first one that enables a wide …

We present here an intrusion detection system automatically parameterized by the security
policy. The main idea consists in monitoring information flows in an operating system in …

A mobile phone evolves as a data repository where the pieces of data have different owners
and may thus be protected by different security policies. These pieces of data are used on …

In this paper we present a model for defining and enforcing a fine-grained information flow
policy. We describe how the policy can be enforced on a typical computer and present …

Most of today's MAC implementations can be turned into permissive mode, where no
enforcement is performed but alerts are raised instead. This behavior is very close to an …

Software systems have an increasing impact on our daily lives. Many systems process
sensitive data or control critical infrastructure. Providing secure software is therefore …

Knowing that a persistent attacker will eventually succeed in gaining a foothold inside the
targeted network despite prevention mechanisms, it is mandatory to perform security …

With the advancement in technology over the past decades, networks have become
increasingly large and complex. In the meantime, cyberattacks have become highly …