32 citations · 43 across the 7 of their papers we have counts for
5 papers · 1 filter
A Calculus for Flow-Limited Authorization
Owen Arden, Anitha Gollamudi, Ethan Cecchetti +2
Real-world applications routinely make authorization decisions based on dynamic computation. Reasoning about dynamically computed authority is challenging. Integrity of the system…
Building secure distributed applications the DECENT way
Haofan Zheng, Owen Arden
Remote attestation (RA) authenticates code running in trusted execution environments (TEEs), allowing trusted code to be deployed even on untrusted hosts. However, trust relationsh…
First-Order Logic for Flow-Limited Authorization
Andrew K. Hirsch, Pedro H. Azevedo de Amorim, Ethan Cecchetti +2
We present the Flow-Limited Authorization First-Order Logic (FLAFOL), a logic for reasoning about authorization decisions in the presence of information-flow policies. We formalize…
Nonmalleable Information Flow: Technical Report
Ethan Cecchetti, Andrew C. Myers, Owen Arden
Noninterference is a popular semantic security condition because it offers strong end-to-end guarantees, it is inherently compositional, and it can be enforced using a simple secur…
Cryptographically Secure Information Flow Control on Key-Value Stores
Lucas Waye, Pablo Buiras, Owen Arden +2
We present Clio, an information flow control (IFC) system that transparently incorporates cryptography to enforce confidentiality and integrity policies on untrusted storage. Clio…