We analyze the space of security policies that can be enforced by monitoring and modifying
programs at run time. Our program monitors, called edit automata, are abstract machines …

It has been known since 1960 that the class of regular languages1 is linked to decidability
questions in formal logics. In particular, WS1S (Weak monadic Second-order theory of 1 …

We analyze the space of security policies that can be enforced by monitoring programs at
runtime. Our program monitors are automata that examine the sequence of program actions …

Certified code is a general mechanism for enforcing security properties. In this paradigm,
untrusted mobile code carries annotations that allow a host to verify its trustworthiness …

The MONA tool provides an implementation of automaton-based decision procedures for the
logics WS1S and WS2S. It has been used for numerous applications, and it is remarkably …

We present the results of the project, which aims to design and implement a high-level
domain-specific language for programming interactive Web services. A fundamental aspect …

" From now on, a main goal in designing a language should be to plan for growth." Guy
Steele: Growing a Language, OOPSLA'98 invited talk. We present our experiences with a …

All uses of HTML forms may benefit from validation of the specified input field values. Simple
validation matches individual values against specified formats, while more advanced …

The Mona tool provides an implementation of the decision procedures for the logics WS1S
and WS2S. It has been used for numerous applications, and it is remarkably efficient in …

The goal of authorization in access control is usually to specify and evaluate/look-up a set of
policies that control the access of users to resources, ie, making decisions about denying or …