Modern web browsers are ubiquitously used by billions of users, connecting them to the
world wide web. From the other side, web browsers do not only provide a unified interface …

We develop the first language-based, Privacy by Design approach that provides support for
a rich class of privacy policies. The policies are user-defined, rather than programmer …

Information flow analysis prevents secret or untrusted data from flowing into public or trusted
sinks. Existing mechanisms cover a wide array of options, ranging from lightweight taint …

Attackers can steal sensitive user information from web pages via third-party scripts. Prior
work shows that secure multi-execution (SME) with declassification is useful for mitigating …

To prevent applications from leaking users' private data to attackers, researchers have
developed runtime information flow control (IFC) mechanisms. Most existing approaches are …

The NODE. JS runtime, in combination with Node Package Manager (NPM), is a popular
ecosystem for building server-side web applications. Both JavaScript's flexible and dynamic …

Scripts on webpages could steal sensitive user data. Much work has been done, both in
modeling and implementation, to enforce information flow control (IFC) of webpages to …

It is common for reactive systems like web services to collect personal information and/or
perform sensitive tasks, making information flow control (IFC) in these applications …

Prior work has established that the attacker should not be allowed to influence what is
declassified or when declassification occurs. Meanwhile, other work looks at protecting …

As more and more sensitive data is handled by software, its trustworthiness becomes an
increasingly important concern. This thesis presents work on ensuring that information …