In this paper, we present an approach for verifying that trusted programs correctly enforce
system security goals when deployed. A trusted program is trusted to only perform safe …

The Lack of security policy enforcement in Web development languages is one of the most
important challenges in Web application systems development, as there is no formal check …

Sometimes Web sites fail in the worst ways. They can reveal private data that can never be
retracted [60, 72, 78, 79]. Or they can succumb to vandalism, and subsequently show corrupt …

Operating systems try to provide secure platforms using appropriate security mechanisms
like DAC and MAC. In spite of this, information confidentiality is not totally provided when …

Current client-server applications such as online banking employ the same client-side
software stack to handle information with differing security and functionality requirements …

SELinux is lacking methods to prove compliance with security policies and detect change.
The SELinux Integrity Instrumentation (SII) parses key parts of SELinux and the Linux …

Wireless Sensor Networks (WSNs) are being used in a variety of applications including
environmental monitoring, event detection, object tracking, and healthcare applications …

Distributed systems have become sufficiently complex that it is impractical for administrators
to configure them manually to prevent security vulnerabilities. These systems consist of …

The complexity of modern operating systems makes securing them a challenging problem.
However, changes in the computing model, such as the rise of cloud computing and smarter …

In this paper, we propose a simple idea we call trusted declassification in which special
declassifier functions are specified as part of the global policy. In particular, individual …