A copy of this work was available on the public web and has been preserved in the Wayback Machine. The capture dates from 2018; you can also visit the original URL.
The file type is application/pdf
.
Explicit Secrecy: A Policy for Taint Tracking
2016
2016 IEEE European Symposium on Security and Privacy (EuroS&P)
Taint tracking is a popular security mechanism for tracking data-flow dependencies, both in high-level languages and at the machine code level. But despite the many taint trackers in practical use, the question of what, exactly, tainting means-what security policy it embodies-remains largely unexplored. We propose explicit secrecy, a generic framework capturing the essence of explicit flows, i.e., the data flows tracked by tainting. The framework is semantic, generalizing previous syntactic
doi:10.1109/eurosp.2016.14
dblp:conf/eurosp/SchoepeBPS16
fatcat:cgiie4alujc7pdgn2arxocdvw4