A significant amount of both client and server-side cryptography is implemented in
JavaScript. Despite widespread concerns about its security, no other language has been …

Modern extensible web platforms like Facebook and Yammer depend on third-party
software to offer a rich experience to their users. Unfortunately, users running a third-party …

Information-Flow Control (IFC) is a well-established approach for allowing untrusted code to
manipulate sensitive data without disclosing it. IFC is typically enforced via type systems and …

Rust, a new systems programming language, provides compile-time memory safety checks
to help eliminate runtime bugs that manifest from improper memory management. This …

This paper presents LWeb, a framework for enforcing label-based, information flow policies
in database-using web applications. In a nutshell, LWeb marries the LIO Haskell IFC …

Differential privacy offers a formal framework for reasoning about privacy and accuracy of
computations on private data. It also offers a rich set of building blocks for constructing …

For several decades, researchers from different communities have independently focused
on protecting confidentiality of data. Two distinct technologies have emerged for such …

Applying differential privacy at scale requires convenient ways to check that programs
computing with sensitive data appropriately preserve privacy. We propose here a fully …

Differential privacy offers a formal framework for reasoning about the privacy and accuracy
of computations on private data. It also offers a rich set of building blocks for constructing …

We describe a language-based, dynamic information flow control (IFC) system called LIO.
Our system presents a new design point for IFC, influenced by the challenge of …