Cache-based attacks are a class of side-channel attacks that are particularly effective in
virtualized or cloud-based environments, where they have been used to recover secret keys …

Verified microkernels such as seL4 provide trustworthy foundations for safety-and security-
critical systems. However, their full potential remains unrealized due, in part, to the lack of …

This paper presents design goals, development approaches, and applications for Slang–a
subset of the Scala programming language designed for engineering high assurance …

Relational properties describe multiple runs of one or more programs. They characterize
many useful notions of security, program refinement, and equivalence for programs with …

We present a relational program logic for reasoning about information flow properties
formalised in an assertion language based on partial equivalence relations. We define and …

Many visions for model-driven component-based development emphasize models as the
“single source of truth” by which different forms of analysis, specification, verification, and …

We present models and soundness results for hybrid information flow, ie for mechanisms
that enforce noninterference-style security guarantees using a combination of static analysis …

Configurable program analysis (CPA) is a generic concept for the formalization of different
software analysis techniques in a single framework. With the tool CPAchecker, this …

Abstract Information flow control extends access control by not only regulating who is
allowed to access what data but also the subsequent use of the data. Applications within …

We demonstrate, by a number of examples, that information flow security properties can be
proved from abstract architectural descriptions, which describe only the causal structure of a …