Current standard security practices do not provide substantial assurance that the end-to-end
behavior of a computing system satisfies important security policies such as confidentiality …

The type and effect discipline is a new framework for reconstructing the principal type and
the minimal effect of expressions in implicitly typed polymorphic functional languages that …

A certified binary is a value together with a proof that the value satisfies a given specification.
Existing compilers that generate certified code have focused on simple memory and control …

Cooperation between independent agents depends upon establishing a degree of security.
Each of the cooperating agents needs assurance that the cooperation will not endanger …

A certified binary is a value together with a proof that the value satisfies a given specification.
Existing compilers that generate certified code have focused on simple memory and control …

We propose a novel method for the verification of information flow security in component-
based systems. The method is (a) modular wrt services and components, ie, overall security …

This report gives a defining description of the programming language FX-91. The FX short
for FX-91 programming language is designed to support the parallel implementation of …

Providing programmers the ability to construct meaningful abstractions to help manage
complexity is a serious language design issue. Many languages define a module system …

The module system supports the structured division of a corpus of Scheme software into a
set of modules. Each module has its own isolated namespace, with visibility of bindings …

This dissertation presents a framework for the application of compositional modularity, a
module model that facilitates extensive reuse of highly decomposed software …