Motivation Scientists increasingly rely on intelligent information systems to help them in their
daily tasks, in particular for managing research objects, like publications or datasets. The …

The principle of least authority states that each component of the system should be given
authority to access only the information and resources that it needs for its operation. This …

As a popular platform-independent language, Java is widely used in enterprise applications.
In the past few years, language vulnerabilities exploited by Java malware have become …

Sandboxes are increasingly important building materials for secure software systems. In
recognition of their potential to improve the security posture of many systems at various …

Integrating third-party packages accelerates modern software engineering, but introduces
the risk of software supply chain vulnerabilities. Vulnerabilities in applications' …

Object capabilities are increasingly used to reason informally about the properties of secure
systems. But can capabilities also aid in formal reasoning? To answer this question, we …

It is more expensive and time consuming to build modern software without extensive supply
chains. Supply chains decrease these development risks, but typically at the cost of …

The security of a software system relies on the principle of least privilege, which says that
each software component must have only the privilege necessary for its execution and …

The Java runtime is installed on billions of devices worldwide, and over years it has been a
primary attack vector for online criminals. In this work, we address that many attack vectors …

QSandbox is an agile software sandbox specifically designed for Quantum Software
research and development. QSandbox agility goes beyond the System Under Development …