PLAS 2006: Ottawa, Ontario, Canada

Vugranam C. Sreedhar, Steve Zdancewic (Eds.): Proceedings of the 2006 Workshop on Programming Languages and Analysis for Security, PLAS 2006, Ottawa, Ontario, Canada, June 10, 2006. ACM 2006, ISBN 1-59593-374-3

David Wagner:
Object capabilities for security. 1-2

Authorization and monitoring

Timothy Fraser, Nick L. Petroni Jr., William A. Arbaugh:
Applying flow-sensitive CQUAL to verify MINIX authorization check placement. 3-6
Kevin W. Hamlen, Greg Morrisett, Fred B. Schneider:
Certified In-lined Reference Monitoring on .NET. 7-16

Finding security flaws

Hiroshi Unno, Naoki Kobayashi, Akinori Yonezawa:
Combining type-based analysis and model checking for finding counterexamples against non-interference. 17-26
Nenad Jovanovic, Christopher Kruegel, Engin Kirda:
Precise alias analysis for static detection of web application vulnerabilities. 27-36

Structuring secure systems

Jeff Polakow, Christian Skalka:
Specifying distributed trust management in LolliMon. 37-46
Xiaoqi Lu, Scott F. Smith:
A microkernel virtual machine: : building security with clear interfaces. 47-56

Secure information flow

Michael Yanguo Liu, Issa Traoré:
Empirical relation between coupling and attackability in software systems: : a case study on DOS. 57-64
Boniface Hicks, Dave King, Patrick McDaniel, Michael Hicks:
Trusted declassification: : high-level policy for a security-typed language. 65-74
Scott F. Smith, Mark Thober:
Refactoring programs to secure information flows. 75-84
Katia Hristova, Tom Rothamel, Yanhong A. Liu, Scott D. Stoller:
Efficient type inference for secure information flow. 85-94