Select Publications
Book Chapters
, 2017, 'WebPol: Fine-Grained Information Flow Policies for Web Browsers', in Lecture Notes in Computer Science, Springer International Publishing, pp. 242 - 259, http://dx.doi.org/10.1007/978-3-319-66402-6_15
Journal articles
, 2024, 'A Modal Type Theory of Expected Cost in Higher-Order Probabilistic Programs', Proceedings of the ACM on Programming Languages, 8, pp. 389 - 414, http://dx.doi.org/10.1145/3689725
, 2023, 'From Fine- to Coarse-Grained Dynamic Information Flow Control and Back', Foundations and Trends® in Programming Languages, 8, pp. 1 - 117, http://dx.doi.org/10.1561/2500000046
, 2021, 'Permissive runtime information flow control in the presence of exceptions', Journal of Computer Security, 29, pp. 361 - 401, http://dx.doi.org/10.3233/jcs-211385
, 2021, 'A unifying type-theory for higher-order (amortized) cost analysis', Proceedings of the ACM on Programming Languages, 5, pp. 1 - 28, http://dx.doi.org/10.1145/3434308
, 2020, 'On the expressiveness and semantics of information flow types', Journal of Computer Security, 28, pp. 129 - 156, http://dx.doi.org/10.3233/jcs-191382
, 2019, 'From fine- to coarse-grained dynamic information flow control and back', Proceedings of the ACM on Programming Languages, 3, pp. 1 - 31, http://dx.doi.org/10.1145/3290389
, 2017, 'Type systems for information flow control', ACM SIGLOG News, 4, pp. 6 - 21, http://dx.doi.org/10.1145/3051528.3051531
, 2008, 'Object‐oriented wrappers for the Linux kernel', Software: Practice and Experience, 38, pp. 1411 - 1427, http://dx.doi.org/10.1002/spe.879
Conference Papers
, 2025, 'A Graded Modal Approach to Relaxed Semantic Declassification', in 2025 IEEE 38th Computer Security Foundations Symposium (CSF), IEEE, pp. 268 - 283, presented at 2025 IEEE 38th Computer Security Foundations Symposium (CSF), 16 June 2025 - 20 June 2025, http://dx.doi.org/10.1109/csf64896.2025.00032
, 2024, 'The 19th Workshop on Programming Languages and Analysis for Security (PLAS 2024)', in Proceedings of the 2024 on ACM SIGSAC Conference on Computer and Communications Security, ACM, pp. 4896 - 4897, presented at CCS '24: ACM SIGSAC Conference on Computer and Communications Security, http://dx.doi.org/10.1145/3658644.3691336
, 2023, 'Counterfactual Explanations and Model Multiplicity: a Relational Verification View', in Proceedings of the Twentieth International Conference on Principles of Knowledge Representation and Reasoning, International Joint Conferences on Artificial Intelligence Organization, pp. 763 - 768, presented at 20th International Conference on Principles of Knowledge Representation and Reasoning {KR-2023}, 02 September 2023 - 08 September 2023, http://dx.doi.org/10.24963/kr.2023/78
, 2018, 'Types for Information Flow Control: Labeling Granularity and Semantic Models', in 2018 IEEE 31st Computer Security Foundations Symposium (CSF), IEEE, pp. 233 - 246, presented at 2018 IEEE 31st Computer Security Foundations Symposium (CSF), 09 July 2018 - 12 July 2018, http://dx.doi.org/10.1109/csf.2018.00024
, 2016, 'On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks', in 2016 IEEE 29th Computer Security Foundations Symposium (CSF), IEEE, pp. 150 - 163, presented at 2016 IEEE 29th Computer Security Foundations Symposium (CSF), 27 June 2016 - 01 July 2016, http://dx.doi.org/10.1109/csf.2016.18
, 2015, 'Information Flow Control for Event Handling and the DOM in Web Browsers', in 2015 IEEE 28th Computer Security Foundations Symposium, IEEE, pp. 366 - 379, presented at 2015 IEEE 28th Computer Security Foundations Symposium (CSF), 13 July 2015 - 17 July 2015, http://dx.doi.org/10.1109/csf.2015.32
, 2014, 'Generalizing Permissive-Upgrade in Dynamic Information Flow Analysis', in Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security, ACM, pp. 15 - 24, presented at ECOOP '14: European Conference on Object-Oriented Programming, http://dx.doi.org/10.1145/2637113.2637116
, 2013, 'Psi-CAL: Foundations of a Programming Language for Services Computing', in 2013 IEEE International Conference on Services Computing, IEEE, pp. 721 - 728, presented at 2013 IEEE International Conference on Services Computing (SCC), 28 June 2013 - 03 July 2013, http://dx.doi.org/10.1109/scc.2013.50
, 2012, 'KAAS: Kernel as a Service', in 2012 IEEE Eighth World Congress on Services, IEEE, pp. 340 - 345, presented at 2012 IEEE World Congress on Services (SERVICES), 24 June 2012 - 29 June 2012, http://dx.doi.org/10.1109/services.2012.69
, 2010, 'Xi-Calculus: A Calculus for Service Interactions', in 2010 IEEE International Conference on Services Computing, IEEE, pp. 105 - 113, presented at 2010 IEEE International Conference on Services Computing (SCC), 05 July 2010 - 10 July 2010, http://dx.doi.org/10.1109/scc.2010.49