SAFE is a clean-slate design for a highly secure computer system, with pervasive
mechanisms for tracking and limiting information flows. At the lowest level, the SAFE …

Extant security mechanisms for web apps, notably the" same-origin policy", are not sufficient
to achieve confidentiality and integrity goals for the many apps that manipulate sensitive …

We propose a rigorous comparison of information flow monitors with respect to two
dimensions: soundness and transparency. For soundness, we notice that the standard …

JavaScript drives the evolution of the web into a powerful application platform. Increasingly,
web applications combine services from different providers. The script inclusion mechanism …

JavaScript is the source of many security problems, including cross-site scripting attacks and
malicious advertising code. Central to these problems is the fact that code from untrusted …

Flow-sensitive analysis for information-flow control (IFC) allows data structures to have
mutable security labels, ie, labels that can change over the course of the computation. This …

Information-flow control mechanisms are difficult both to design and to prove correct. To
reduce the time wasted on doomed proof attempts due to broken definitions, we advocate …

Multiple Facets (MF) is a dynamic enforcement mechanism which has proved to be a good fit
for implementing information flow security for JavaScript. It relies on multi executing the …

SAFE is a clean-slate design for a highly secure computer system, with pervasive
mechanisms for tracking and limiting information flows. At the lowest level, the SAFE …

Taint analysis has been used in numerous scripting languages such as Perl and Ruby to
defend against various form of code injection attacks, such as cross-site scripting (XSS) and …