
@article {631,
	title = {Automatic Detection and Demonstrator Generation for Information Flow Leaks in Object-Oriented Programs},
	journal = {Computers \& Security},
	volume = {67},
	year = {2017},
	author = {Quoc Huy Do and Richard Bubel and Reiner H{\"a}hnle}
}
@conference {628,
	title = {Comprehending Isabelle/HOL{\textquoteright}s Consistency},
	booktitle = {Proceedings of the 26th European Symposium on Programming (ESOP)},
	year = {2017},
	author = {Ond{\v r}ej Kun{\v c}ar and Andrei Popescu}
}
@conference {626,
	title = {CoSMeDis: A Distributed Social Media Platform with Formally Verified Confidentiality Guarantees},
	booktitle = {Proceedings of the 38th IEEE Symposium on Security and Privacy (S\&P)},
	year = {2017},
	author = {Thomas Bauerei{\ss} and Armando Pesenti Gritti and Andrei Popescu and Franco Raimondi}
}
@conference {635,
	title = {The First-Order Logic of Hyperproperties},
	booktitle = {Proceedings of the 34th Symposium on Theoretical Aspects of Computer Science (STACS)},
	year = {2017},
	author = {Bernd Finkbeiner and Martin Zimmermann}
}
@conference {624,
	title = {Modular Verification of Information-Flow Security in Component-Based Systems},
	booktitle = {Proceedings of the 15th International Conference on Software Engineering and Formal Methods (SEFM)},
	year = {2017},
	author = {Simon Greiner and Martin Mohr and Bernhard Beckert}
}
@conference {627,
	title = {Monitoring Hyperproperties},
	booktitle = {Proceedings of the 17th International Conference on Runtime Verification (RV)},
	year = {2017},
	author = {Bernd Finkbeiner and Christopher Hahn and Marvin Stenger and Leander Tentrup}
}
@conference {633,
	title = {Taming Message-passing Communication in Compositional Reasoning about Confidentiality},
	booktitle = {Proceedings of the 15th Asian Symposium on Programming Languages and Systems (APLAS)},
	year = {2017},
	author = {Ximeng Li and Heiko Mantel and Markus Tasch}
}
@article {630,
	title = {Type Systems for Information Flow Control: The Question of Granularity},
	journal = {ACM SIGLOG News},
	volume = {4},
	year = {2017},
	author = {Vineet Rajani and Iulia Bastys and Willard Rafnsson and Deepak Garg}
}
@conference {634,
	title = {Verifying Security Policies in Multi-agent Workflows with Loops},
	booktitle = {Proceedings of the 24th ACM Conference on Computer and Communications Security (CCS)},
	year = {2017},
	author = {Bernd Finkbeiner and Christian M{\"u}ller and Helmut Seidl and Eugen Zalinescu}
}
@conference {625,
	title = {WebPol: Fine-grained Information Flow Policies for Web Browsers},
	booktitle = {Proceedings of the 22nd European Symposium on Research in Computer Security (ESORICS)},
	year = {2017},
	author = {Abhishek Bichhawat and Vineet Rajani and Jinank Jain and Deepak Garg and Christian Hammer}
}
@conference {616,
	title = {On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks},
	booktitle = {Proceedings of the 29th IEEE Computer Security Foundations Symposium (CSF)},
	year = {2016},
	author = {Vineet Rajani and Deepak Garg and Tamara Rezk}
}
@conference {615,
	title = {Asymmetric Secure Multi-execution with Declassification},
	booktitle = {Proceedings of the 5th International Conference on Principles of Security and Trust (POST)},
	year = {2016},
	author = {Iulia Bolosteanu and Deepak Garg}
}
@conference {614,
	title = {Combining Static Analysis with Probabilistic Models to Enable Market-Scale Android Inter-component Analysis},
	booktitle = {Proceedings of the 43rd Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL)},
	year = {2016},
	author = {Damien Octeau and Somesh Jha and Matthew Dering and Patrick McDaniel and Alexandre Bartel and Li Li and Jacques Klein and Yves Le Traon}
}
@conference {621,
	title = {Computing Specification-Sensitive Abstractions for Program Verification},
	booktitle = {Proceedings of the 2nd International Symposium on Dependable Software Engineering: Theories, Tools, and Applications (SETTA)},
	year = {2016},
	author = {Tianhai Liu and Shmuel Tyszberowicz and Mihai Herda and Bernhard Beckert and Daniel Grahl and Mana Taghdiri}
}
@conference {609,
	title = {CoSMed: A Confidentiality-Verified Social Media Platform},
	booktitle = {Proceedings of the 7th International Conference on Interactive Theorem Proving (ITP)},
	year = {2016},
	author = {Thomas Bauerei{\ss} and Armando Pesenti Gritti and Andrei Popescu and Franco Raimondi}
}
@conference {610,
	title = {From Types to Sets by Local Type Definitions in Higher-Order Logic},
	booktitle = {Proceedings of the 7th International Conference on Interactive Theorem Proving (ITP)},
	year = {2016},
	author = {Ond{\v r}ej Kun{\v c}ar and Andrei Popescu}
}
@conference {613,
	title = {On Improvements Of Low-Deterministic Security},
	booktitle = {Proceedings of the 5th International Conference on Principles of Security and Trust (POST)},
	year = {2016},
	author = {Joachim Breitner and J{\"u}rgen Graf and Martin Hecker and Martin Mohr and Gregor Snelling}
}
@conference {611,
	title = {Practical Detection of Entropy Loss in Pseudo-Random Number Generators},
	booktitle = {Proceedings of the 23rd ACM Conference on Computer and Communications Security (CCS)},
	year = {2016},
	author = {Felix D{\"o}rre and Vladimir Klebanov}
}
@conference {622,
	title = {Progress-Sensitive Security for SPARK},
	booktitle = {Proceedings of the 8th International Symposium on Engineering Secure Software and Systems (ESSoS)},
	year = {2016},
	author = {Willard Rafnsson and Andrei Sabelfeld and Deepak Garg}
}
@conference {617,
	title = {sElect: A Lightweight Verifiable Remote Voting System},
	booktitle = {Proceedings of the 29th IEEE Computer Security Foundations Symposium (CSF)},
	year = {2016},
	author = {Ralf K{\"u}sters and Johannes M{\"u}ller and Enrico Scapin and Tomasz Truderung}
}
@conference {619,
	title = {SoK: Verifiability Notions for E-Voting Protocols},
	booktitle = {Proceedings of the 37th IEEE Symposium on Security and Privacy (S\&P)},
	year = {2016},
	author = {V{\'e}ronique Cortier and David Galindo and Ralf K{\"u}sters and Johannes M{\"u}ller and Tomasz Truderung}
}
@conference {620,
	title = {Sound Probabilistic $\#$SAT with Projection},
	booktitle = {Proceedings of the 14th International Workshop on Quantitative Aspects of Programming Languages and Systems (QAPL)},
	year = {2016},
	author = {Vladimir Klebanov and Alexander Weigl and J{\"o}rg Weisbarth}
}
@conference {618,
	title = {Towards Fully Automatic Logic-Based Information Flow Analysis: An Electronic-Voting Case Study},
	booktitle = {Proceedings of the 5th International Conference on Principles of Security and Trust (POST)},
	year = {2016},
	author = {Huy Quoc Do and Eduard Kamburjan and Nathan Wasser}
}
@conference {600,
	title = {Algorithms for Model Checking HyperLTL and HyperCTL*},
	booktitle = {Proceedings of the 27th International Conference on Computer Aided Verification (CAV)},
	year = {2015},
	author = {Bernd Finkbeiner and Markus Rabe and C{\'e}sar S{\'a}nchez}
}
@conference {623,
	title = {A Consistent Foundation for Isabelle/HOL},
	booktitle = {Proceedings of the 6th International Conference on Interactive Theorem Proving (ITP)},
	year = {2015},
	author = {Ond{\v r}ej Kun{\v c}ar and Andrei Popescu}
}
@conference {632,
	title = {Exploit Generation for Information Flow Leaks in Object-Oriented Programs},
	booktitle = {Proceedings of the 30th International Information Security and Privacy Conference (IFIP SEC)},
	year = {2015},
	author = {Quoc Huy Do and Richard Bubel and Reiner H{\"a}hnle}
}
@conference {604,
	title = {A Fully Decentralized Data Usage Control Enforcement Infrastructure},
	booktitle = {Proceedings of the 13th International Conference on Applied Cryptography and Network Security},
	year = {2015},
	author = {Florian Kelbert and Alexander Pretschner}
}
@conference {593,
	title = {A Hybrid Approach for Proving Noninterference of Java Programs},
	booktitle = {Proceedings of the 28th IEEE Computer  Security Foundations Symposium (CSF)},
	year = {2015},
	author = {Ralf K{\"u}sters and Tomasz Truderung and Bernhard Beckert and Daniel Bruns and Michael Kirsten and Martin Mohr}
}
@conference {585,
	title = {Hybrid Monitors for Concurrent Noninterference},
	booktitle = {Proceedings of the 28th IEEE Computer Security Foundations Symposium (CSF)},
	year = {2015},
	author = {Aslan Askarov and Stephen Chong and Heiko Mantel}
}
@conference {602,
	title = {IccTA: Detecting Inter-Component Privacy Leaks in Android Apps},
	booktitle = {Proceedings of the 37th International Conference on Software Engineering (ICSE)},
	year = {2015},
	author = {Li Li and Alexandre Bartel and Tegawend{\'e} F. Bissyand{\'e} and Jacques Klein and Yves Le Traon and Steven Arzt and Siegfried Rasthofer and Eric Bodden and Damien Octeau and Patrick McDaniel}
}
@conference {592,
	title = {Information Flow Control for Event Handling and the DOM in Web Browsers},
	booktitle = {Proceedings of the 28th IEEE Computer Security Foundations Symposium (CSF)},
	year = {2015},
	author = {Vineet Rajani and Abhishek Bichhawat and Deepak Gark and Christian Hammer}
}
@conference {601,
	title = {Pseudo-Random Number Generator Verification: A Case Study},
	booktitle = {Proceedings of the 7th Working Conference on Verified Software: Theories, Tools, and Experiments (VSTTE)},
	year = {2015},
	author = {Felix D{\"o}rre and Vladimir Klebanov}
}
@booklet {588,
	title = {Security in E-Voting},
	howpublished = {Poster at the IEEE Symposium on Security and Privacy (S\&P)},
	year = {2015},
	author = {Daniel Bruns and Huy Quoc Do and Simon Greiner and Mihai Herda and Martin Mohr and Enrico Scapin and Tomasz Truderung and Bernhard Beckert and Ralf K{\"u}sters and Heiko Mantel and Richard Gay}
}
@booklet {587,
	title = {Security in Web-Based Workflows},
	howpublished = {Poster at the IEEE Symposium on Security and Privacy (S\&P)},
	year = {2015},
	author = {Thomas Bauereiss and Abhishek Bichhawat and Iulia Bolosteanu and Peter Faymonville and Bernd Finkbeiner and Deepak Garg and Richard Gay and Sergey Grebenshchikov and Christian Hammer and Dieter Hutter and Ond{\v r}ej Kun{\v c}ar and Peter Lammich and Heiko Mantel and Christian M{\"u}ller and Andrei Popescu and Markus Rabe and Vineet Rajani and Helmut Seidl and Markus Tasch and Leander Tentrup}
}
@conference {591,
	title = {SHRIFT System-wide HybRid Information Flow Tracking},
	booktitle = {Proceedings of the 30th International Information Security and Privacy Conference (IFIP SEC)},
	year = {2015},
	author = {Enrico Loval and Alexander Fromm and Martin Mohr and Alexander Pretschner}
}
@booklet {586,
	title = {Software Security for Mobile Devices},
	howpublished = {Poster at the IEEE Symposium on Security and Privacy (S\&P)},
	year = {2015},
	author = {Steven Arzt and Alexandre Bartel and Richard Gay and Steffen Lortz and Enrico Lovat and Heiko Mantel and Martin Mohr and Benedikt Nordhoff and Matthias Perner and Siegfried Rasthofer and David Schneider and Gregor Snelting and Artem Starostin and Alexandra Weber}
}
@article {583,
	title = {Understanding Probabilistic Software Leaks},
	journal = {Science of Computer Programming},
	year = {2015},
	note = {Special Issue on New Ideas and Emerging Results in Understanding Software},
	author = {Gregor Snelting}
}
@conference {594,
	title = {Using Dynamic Pushdown Networks to Automate a Modular Information-Flow Analysis},
	booktitle = {Pre-Proceedings of the 25th International Symposium on Logic Based Program Synthesis and Transformation (LOPSTR)},
	year = {2015},
	author = {Heiko Mantel and Markus M{\"u}ller-Olm and Matthias Perner and Alexander Wenner}
}
@article {ar:PopescuLammich2014,
	title = {Bounded-Deducibility Security},
	journal = {Archive of Formal Proofs},
	year = {2014},
	author = {A. Popescu and P. Lammich}
}
@article {582,
	title = {Checking Probabilistic Noninterference Using JOANA},
	journal = {it - Information Technology},
	year = {2014},
	author = {Gregor Snelting and Dennis Giffhorn and J{\"u}rgen Graf and Christian Hammer and Martin Hecker and Martin Mohr and Daniel Wasserrab}
}
@conference {inp:BauereissHutter2014a,
	title = {Compatibility of Safety Properties and Possibilistic Information Flow Security in {MAKS}},
	booktitle = {Proceedings of the 29th International Information Security and Privacy Conference (IFIP SEC 2014)},
	year = {2014},
	author = {T. Bauereiss and D. Hutter}
}
@conference {inp:KanavLammichPopescu2014,
	title = {A Conference Management System with Verified Document Confidentiality},
	booktitle = {Proceedings of the 26th International Conference on Computer Aided Verification (CAV 2014)},
	year = {2014},
	note = {To appear.},
	author = {S. Kanav and P. Lammich and A. Popescu}
}
@conference {inp:Lovat2014,
	title = {Cross-Layer Data-Centric Usage Control},
	booktitle = {Proceedings of the International Symposium on Engineering Secure Software and Systems - Doctoral Symposium (ESSoS 2014))},
	year = {2014},
	note = {To appear.},
	author = {E. Lovat}
}
@conference {584,
	title = {Decentralized Distributed Data Usage Control},
	booktitle = {Proceedings of the 13th International Conference on Cryptology and Network Security (CANS 2014)},
	year = {2014},
	author = {Florian Kelbert and Alexander Pretschner}
}
@conference {inp:RasthoferArztLovatBodden2014,
	title = {DROIDFORCE: Enforcing Complex, Data-Centric, System-Wide Policies in Android},
	booktitle = {Proceedings of the 9th International IEEE Conference on Availability, Reliability and Security (ARES 2014)},
	year = {2014},
	note = {To appear.},
	author = {S. Rasthofer and S. Arzt and E. Lovat and E. Bodden}
}
@conference {inp:SchebenSchmitt2014,
	title = {Efficient Self-Composition for Weakest Precondition Calculi},
	booktitle = {Proceedings of the 19th International Symposium on Formal Methods (FM 2014)},
	year = {2014},
	author = {C. Scheben and P. H. Schmitt}
}
@conference {inp:KuestersScapinTruderungGraf2014,
	title = {Extending and Applying a Framework for the Cryptographic Verification of Java Programs},
	booktitle = {Proceedings of the 3rd Conference on Principles of Security and Trust (POST 2014)},
	year = {2014},
	author = {R. K{\"u}sters and E. Scapin and T. Truderung and J. Graf},
	editor = {Mart{\'\i}n Abadi and Steve Kremer}
}
@conference {inp:ArztRasthoferFritzBoddenBarteKleinTraonOctreauMcDaniel2013,
	title = {FlowDroid: Precise Context, Flow, Field, Object-sensitive and Lifecycle-aware Taint Analysis for Android Apps},
	booktitle = {Proceedings of the 35th ACM SIGPLAN Conference on Programming Language Design and Implementation (PLDI 2014)},
	year = {2014},
	author = {S. Arzt and S. Rasthofer and C. Fritz and E. Bodden and A. Barte and J. Klein and Y. Le Traon and D. Octeau and P. McDaniel}
}
@conference {inp:KuestersTruderungVogt2014,
	title = {{Formal Analysis of Chaumian Mix Nets with Randomized Partial Checking}},
	booktitle = {Proceedings of the 35th IEEE Symposium on Security and Privacy (S\&P 2014)},
	year = {2014},
	note = {To appear.},
	author = {R. K{\"u}sters and T. Truderung and A. Vogt}
}
@article {ar:GreweMantelSchoepe2014,
	title = {A Formalization of Assumptions and Guarantees for Compositional Noninterference},
	journal = {Archive of Formal Proofs},
	year = {2014},
	month = {apr},
	issn = {2150-914x},
	author = {S. Grewe and H. Mantel and D. Schoepe}
}
@article {ar:GreweLuxMantelSauer2014b,
	title = {A Formalization of Declassification with WHAT-and-WHERE-Security},
	journal = {Archive of Formal Proofs},
	year = {2014},
	month = {apr},
	issn = {2150-914x},
	author = {S. Grewe and A. Lux and H. Mantel and J. Sauer}
}
@article {ar:GreweLuxMantelSauer2014a,
	title = {A Formalization of Strong Security},
	journal = {Archive of Formal Proofs},
	year = {2014},
	month = {apr},
	issn = {2150-914x},
	author = {S. Grewe and A. Lux and H. Mantel and J. Sauer}
}
@conference {inp:StenzelKatkalovBorekReif2014,
	title = {Formalizing Information Flow Control in a Model-Driven Approach},
	booktitle = {Proceedings of the Information Communication Technology-EurAsia (ICT-EurAsia 2014)},
	year = {2014},
	author = {K. Stenzel and K. Katkalov and M. Borek and W. Reif}
}
@conference {inp:BichhawatRajaniGargHammer2014b,
	title = {Generalizing Permissive-Upgrade in Dynamic Information Flow Analysis},
	booktitle = {Proceedings of the 9th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS 2014)},
	year = {2014},
	author = {A. Bichhawat and V. Rajani and D. Garg and C. Hammer}
}
@conference {inp:FennellThiemann2014,
	title = {Gradual Typing for Annotated Type Systems},
	booktitle = {Proceedings of the 23rd European Symposium on Programming (ESOP 2014)},
	year = {2014},
	author = {L. Fennell and P. Thiemann}
}
@article {ar:BrunsMostowskiUlbrich2014,
	title = {Implementation-level Verification of Algorithms with {Ke{\k e}rn-.1emY}},
	journal = {Software Tools for Technology Transfer},
	year = {2014},
	note = {To appear.},
	publisher = {Springer},
	author = {D. Bruns and W. Mostowski and M. Ulbrich}
}
@conference {inp:BichhawatRajaniGargHammer2014a,
	title = {Information Flow Control in WebKit{\textquoteright}s JavaScript Bytecode},
	booktitle = {Proceedings of the 3rd conference on Principles of Security and Trust (POST 2014)},
	year = {2014},
	author = {A. Bichhawat and V. Rajani and D. Garg and C. Hammer}
}
@conference {598,
	title = {Information Flow in Object-Oriented Software},
	booktitle = {Proceedings of the 24th International Symposium on Logic Based Program Synthesis and Transformation (LOPSTR)},
	year = {2014},
	author = {Bernhard Beckert and Daniel Bruns and Vladimir Klebanov and Christoph Scheben and Peter H. Schmitt and Matthias Ulbrich}
}
@conference {inp:SeidlKovacs2014,
	title = {Interprocedural Information Flow Analysis of XML Processors},
	booktitle = {Proceedings of the 8th International Conference on Language and Automata Theory and Applications (LATA 2014)},
	year = {2014},
	author = {H. Seidl and M. Kov{\'a}cs}
}
@conference {599,
	title = {The KeY Platform for Verification and Analysis of Java Programs},
	booktitle = {Proceedings of the 6th Working Conference on Verified Software: Theories, Tools, and Experiments},
	year = {2014},
	author = {Wolfgang Ahrendt and Bernhard Beckert and Daniel Bruns and Richard Bubel and Christoph Gladisch and Sarah Grebing and Reiner H{\"a}hnle and Martin Henschel and Mihai Herda and Vladimir Klebanov and Wojciech Mostowski and Christoph Scheben and Peter~H. Schmitt and Mattias Ulbrich}
}
@article {ar:RasthoferArztBodden2014,
	title = {A Machine-learning Approach for Classifying and Categorizing Android Sources and Sinks},
	journal = {Proceedings of the Network and Distributed System Security Symposium (NDSS 2014)},
	year = {2014},
	author = {S. Rasthofer and S. Arzt and E. Bodden}
}
@conference {inp:WuchnerOchoaPretschner2014,
	title = {{Malware Detection with Quantitative Data Flow Graphs}},
	booktitle = {Proceedings of the 9th ACM Symposyum on Information, Computer and Communications Security (ASIACCS 2014)},
	year = {2014},
	note = {To appear.},
	author = {T. W{\"u}chner and M. Ochoa and A. Pretschner}
}
@article {578,
	title = {A New Algorithm for Low-Deterministic Security},
	journal = {International Journal on Information Security},
	year = {2014},
	note = {to appear},
	author = {Dennis Giffhorn and Gregor Snelting}
}
@conference {inp:MantelPernerSauer2014a,
	title = {Noninterference under Weak Memory Models},
	booktitle = {Proceedings of the 27th IEEE Computer Security Foundations Symposium (CSF 2014)},
	year = {2014},
	note = {To appear.},
	author = {H. Mantel and M. Perner and J. Sauer}
}
@conference {inp:BauereissHutter2014b,
	title = {Possibilistic information flow security of workflow management systems},
	booktitle = {Proceedings of the 1st International Workshop on Graphical Models for Security at ETAPS 2014 (GraMSec 2014)},
	year = {2014},
	author = {T. Bauereiss and D. Hutter}
}
@article {ar:Klebanov2014,
	title = {Precise Quantitative Information Flow Analysis {\textendash} A Symbolic Approach},
	journal = {Theoretical Computer Science},
	year = {2014},
	note = {In press.},
	author = {V. Klebanov}
}
@article {ar:PopescuHoelzl2014,
	title = {Probabilistic Noninterference},
	journal = {Archive of Formal Proofs},
	year = {2014},
	author = {A. Popescu and J. H{\"o}lzl}
}
@conference {inp:LovatOudinetPretschner2014a,
	title = {On Quantitative Dynamic Data Flow Tracking},
	booktitle = {Proceedings of the 4th ACM Conference on Data and Application Security and Privacy (CODASPY 2014)},
	year = {2014},
	author = {E. Lovat and J. Oudinet and A. Pretschner}
}
@conference {inp:ArztBodden2014,
	title = {Reviser: Efficiently Updating IDE-/IFDS-Based Data-Flow Analyses in Response to Incremental Program Changes},
	booktitle = {Proceedings of the 36th International Conference on Software Engineering (ICSE 2014)},
	year = {2014},
	note = {To appear.},
	author = {S. Arzt and E. Bodden}
}
@conference {inp:BauereissHutter2014c,
	title = {Security (hyper-)properties in workflow systems: From specification to verification},
	booktitle = {Electronic Proceedings of the Doctoral Symposium at the International Symposium on Engineering Secure Software and Systems (ESSoS-DS 2014)},
	year = {2014},
	note = {To appear.},
	author = {T. Bauereiss and D. Hutter}
}
@article {ar:RabeLammichPopescu2014,
	title = {A shallow embedding of HyperCTL},
	journal = {Archive of Formal Proofs},
	year = {2014},
	author = {M. N. Rabe and P. Lammich and A. Popescu}
}
@conference {inp:LovatKelbert2014,
	title = {{Structure Matters - A new Approach for Data flow Tracking}},
	booktitle = {Proceedings of the 4th International Workshop on Data Usage Management (DUMA 2014)},
	year = {2014},
	note = {To appear.},
	author = {E. Lovat and F. Kelbert}
}
@conference {inp:ClarksonFinkbeinerKoleiniMicinskiRabeSanchet2014,
	title = {Temporal Logics for Hyperproperties},
	booktitle = {Proceedings of the 3rd Conference on Principles of Security and Trust (POST 2014)},
	year = {2014},
	author = {M. R. Clarkson and B. Finkbeiner and M. Koleini and K. K. Micinski and M. N. Rabe and C. S{\'a}nchez}
}
@conference {inp:BlasumHavleLangensteinNemouchiSchmaltzStephanTverdyshevVerbeekWolff2014,
	title = {Using Isabelle/HOL to Develop and Maintain Separation Invariants for an Operating System},
	booktitle = {Isabelle 2014 workshop at FloC 2014},
	year = {2014},
	author = {H. Blasum and O. Havle and B. Langenstein and Y. Nemouchi and J. Schmaltz and W. Stephan and S. Tverdyshew and F. Verbeek and B. Wolf}
}
@conference {inp:WuchnerMullerFischer2013,
	title = {{Compliance-Preserving Cloud Storage Federation Based on Data-Driven Usage Control}},
	booktitle = {Proceedings of the 5th International Conference on Cloud Computing Technology and Science (CloudCom 2013)},
	year = {2013},
	author = {T. W{\"u}chner and S. M{\"u}ller and R. Fischer}
}
@conference {inp:LammichMuellerOlmSeidlWenner2013,
	title = {Contextual Locking for Dynamic Pushdown Networks},
	booktitle = {Proceedings of the 20th International Symposium on Static Analysis (SAS 2013)},
	year = {2013},
	author = {P. Lammich and M. M{\"u}ller-Olm and H. Seidl and A. Wenner}
}
@conference {inp:BeckertBruns2013,
	title = {Dynamic Logic with Trace Semantics},
	booktitle = {Proceedings of the 24th International Conference on Automated Deduction (CADE-24)},
	year = {2013},
	author = {B. Beckert and D. Bruns}
}
@conference {inp:Hammer2013,
	title = {Efficient Algorithms for Control Closures},
	booktitle = {1st International Workshop on Interference and Dependence (ID 2013)},
	year = {2013},
	author = {C. Hammer}
}
@conference {inp:KeilThiemann2013a,
	title = {Efficient Dynamic Access Analysis Using {JavaScript} Proxies},
	booktitle = {Proceedings of the 9th Symposium on Dynamic Languages (DLS 2013)},
	year = {2013},
	author = {M. Keil and P. Thiemann}
}
@conference {inp:BlanchetteBoehmePopescuSmallbone2013,
	title = {Encoding Monomorphic and Polymorphic Types},
	booktitle = {Proceedings of the 19th International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS 2013)},
	year = {2013},
	author = {J. C. Blanchette and S. B{\"o}hme and A. Popescu and N. Smallbone}
}
@article {inp:PopescuHoelzlNipkow2013a,
	title = {Formal Verification of Language-Based Concurrent Noninterference},
	journal = {J. Formalized Reasoning},
	volume = {6},
	number = {1},
	year = {2013},
	pages = {1-30},
	author = {A. Popescu and J. H{\"o}lzl and T. Nipkow}
}
@conference {inp:PopescuHoelzlNipkow2013b,
	title = {Formalizing Probabilistic Noninterference},
	booktitle = {Proceedings of the 3rd International Conference on Certified Programs and Proofs (CPP 2013)},
	year = {2013},
	author = {A. Popescu and J. H{\"o}lzl and T. Nipkow}
}
@conference {inp:FennellThiemann2013,
	title = {Gradual Security Typing with References},
	booktitle = {Proceedings of the 26th IEEE Computer Security Foundations Symposium (CSF 2013)},
	year = {2013},
	pages = {224-239},
	keywords = {conference},
	author = {L. Fennell and P. Thiemann}
}
@conference {inp:KuestersTruderung2013,
	title = {A Hybrid Approach for Proving Noninterference and Applications to the Cryptographic Verification of {Java} Programs},
	booktitle = {Grande Region Security and Reliability Day 2013},
	year = {2013},
	note = {Extended Abstract},
	author = {R. K{\"u}sters and T. Truderung and B. Beckert and D. Bruns and J. Graf and C. Scheben}
}
@conference {inp:NordhoffMuellerOlmLammich2013,
	title = {{Iterable Forward Reachability Analysis of Monitor-DPNs}},
	booktitle = {Proceedings of Semantics, Abstract Interpretation, and Reasoning about Programs: Essays Dedicated to David A. Schmidt on the Occasion of his Sixtieth Birthday (Festschrift for Dave Schmidt)},
	year = {2013},
	author = {B. Nordhoff and M. M{\"u}ller-Olm and P. Lammich}
}
@conference {inp:GrafHeckerMohrNordhoff2013,
	title = {Lock-sensitive Interference Analysis for Java: Combining Program Dependence Graphs with Dynamic Pushdown Networks},
	booktitle = {1st International Workshop on Interference and Dependence (ID 2013)},
	year = {2013},
	author = {J. Graf and M. Hecker and M. Mohr and B. Nordhoff}
}
@conference {inp:BlanchettePopescu2013,
	title = {Mechanizing the Metatheory of Sledgehammer},
	booktitle = {Proceedings of the 9th International Symposium on Frontiers of Combining Systems (FroCos 2013)},
	year = {2013},
	author = {J. C. Blanchette and A. Popescu}
}
@conference {inp:StenzelKatkalovBorekReif2013a,
	title = {Model-Driven Development of Information Flow-Secure Systems with IFlow},
	booktitle = {Proceedings of 5th ASE/IEEE International Conference on Information Privacy, Security, Risk and Trust (PASSAT 2013)},
	year = {2013},
	author = {K. Katkalov and K. Stenzel and M. Borek and W. Reif}
}
@article {inp:StenzelKatkalovBorekReif2013b,
	title = {Model-Driven Development of Information Flow-Secure Systems with IFlow},
	journal = {ASE Science Journal},
	volume = {2},
	number = {2},
	year = {2013},
	author = {K. Katkalov and K. Stenzel and M. Borek and W. Reif}
}
@conference {inp:PopescuHoelzlNipkow2013,
	title = {Noninterfering Schedulers - When Possibilistic Noninterference Implies Probabilistic Noninterference},
	booktitle = {Proceedings of the 5th Conference on Algebra and Coalgebra in Computer Science (CALCO 2013)},
	year = {2013},
	author = {A. Popescu and J. H{\"o}lzl and T. Nipkow}
}
@conference {inp:KovacsSeidlFinkbeiner13,
	title = {Relational Abstract Interpretation for the Verification of 2-Hypersafety Properties},
	booktitle = {Proceedings of the 20th ACM Conference on Computer and Communications Security (CCS 2013)},
	year = {2013},
	author = {M. Kov{\'a}cs and H. Seidl and B. Finkbeiner}
}
@conference {inp:KlebanovMantheyMuise2013,
	title = {{SAT}-based Analysis and Quantification of Information Flow in Programs},
	booktitle = {Proceedings of the 10th International Conference on Quantitative Evaluation of Systems (QEST 2013)},
	year = {2013},
	author = {V. Klebanov and N. Manthey and C. Muise}
}
@conference {inp:KeilThiemann2013b,
	title = {Type-based Dependency Analysis for {JavaScript}},
	booktitle = {Proceedings of the 8th ACM SIGPLAN Workshop on Programming Languages and Analysis for Security (PLAS 2013)},
	year = {2013},
	author = {M. Keil and P. Thiemann}
}
@conference {inp:GrafHeckerMohr2013,
	title = {Using JOANA for Information Flow Control in Java Programs - A Practical Guide},
	booktitle = {Proceedings of the 6th Working Conference on Programming Languages (ATPS 2013)},
	year = {2013},
	author = {J. Graf and M. Hecker and M. Mohr}
}
@conference {inp:AccorsiLehmann2012a,
	title = {Automatic Information Flow Analysis of Business Process Models},
	booktitle = {10th International Conference on Business Process Management (BPM 2012)},
	year = {2012},
	author = {R. Accorsi and A. Lehmann}
}
@conference {inp:KoepfMauborgneOchoa2012a,
	title = {Automatic Quantification of Cache Side-Channels},
	booktitle = {Proceedings of the 24th International Conference on Computer Aided Verification (CAV 2012)},
	year = {2012},
	author = {B. K{\"o}pf and L. Mauborgne and M. Ochoa}
}
@conference {inp:FennellThiemann2012,
	title = {The Blame Theorem for a Linear Lambda Calculus with Type Dynamic},
	booktitle = {Proceedings of the Symposium on Trends in Functional Programming (TFP 2012)},
	year = {2012},
	author = {L. Fennell and P. Thiemann}
}
@conference {inp:JagerSchinzelSmorovsky2012a,
	title = {{Bleichenbacher{\textquoteright}s Attack Strikes Again: Breaking PKCS\#1 v1.5 in XML Encryption}},
	booktitle = {Proceedings of the 17th European Symposium on Research in Computer Security (ESORICS 2012)},
	year = {2012},
	author = {T. Jager and S. Schinzel and J Smorovksy}
}
@conference {inp:KuestersTruderungVogt2012a,
	title = {{Clash Attacks on the Verifiability of E-Voting Systems}},
	booktitle = {Proceedings of the 33rd IEEE Symposium on Security and Privacy (S{\&}P 2012)},
	year = {2012},
	author = {R. K{\"u}sters and T. Truderung and A. Vogt}
}
@conference {inp:KatkalovFischerStenzelMoebiusReif2012,
	title = {Evaluation of Jif and Joana as information flow analyzers in a model-driven approach},
	booktitle = {Proceedings of 7th International Workshop on Data Privacy Management (DPM 2012)},
	year = {2012},
	author = {K. Katkalov and P. Fischer and K. Stenzel and N. Moebius and W. Reif}
}
@conference {inp:HadaschMuellerMaedche2012a,
	title = {Exploring Antecedent Environmental and Organizational Factors to User-Caused Information Leaks: A Qualitative Study},
	booktitle = {Proceedings of the 20th European Conference on Information Systems (ECIS 2012)},
	year = {2012},
	address = {Barcelona, Spain},
	author = {F. Hadasch and B. Mueller and A. Maedche}
}
@conference {inp:BeckertBruns2012a,
	title = {Formal Semantics of Model Fields in Annotation-based Specifications},
	booktitle = {{KI 2012}: Advances in Artificial Intelligence},
	year = {2012},
	author = {B. Beckert and D. Bruns}
}
@conference {inp:MannStarostin2012a,
	title = {A Framework for Static Detection of Privacy Leaks in Android Applications},
	booktitle = {Proceedings of the 27th Symposium on Applied Computing (SAC 2012)},
	year = {2012},
	author = {C. Mann and A. Starostin}
}
@conference {inp:KuestersTruderungGraf2012a,
	title = {{A Framework for the Cryptographic Verification of Java-like Programs}},
	booktitle = {Proceedings of the 25th IEEE Computer Security Foundations Symposium (CSF 2012)},
	year = {2012},
	author = {R. K{\"u}sters and T. Truderung and J. Graf}
}
@article {art:KuestersTruderungVogt2012,
	title = {A Game-Based Definition of Coercion-Resistance and its Applications},
	journal = {Journal of Computer Security (special issue of selected CSF 2010 papers)},
	volume = {20},
	number = {6/2012},
	year = {2012},
	author = {R. K{\"u}sters and T. Truderung and A. Vogt}
}
@conference {inp:CuellarOchoaRios2012a,
	title = {Indistinguishable regions in Geographic Location Privacy},
	booktitle = {Proceedings of the 27th ACM Symposium on Applied Computing (SAC 2012)},
	year = {2012},
	author = {J. C{\'u}ellar and M. Ochoa and R. Rios}
}
@conference {inp:LehmannFahland2012b,
	title = {Information Flow Security for Business Process Models - just one click away},
	booktitle = {Proceedings of the 10th International Conference on Business Process Management - Demo Track (BPM 2012)},
	year = {2012},
	author = {A. Lehmann and D. Fahland}
}
@conference {inp:Lochbihler2012a,
	title = {Java and the Java Memory Model {\textendash} a Unified, Machine-Checked Formalisation},
	booktitle = {Proceedings of the ACM SIGPLAN 7th Workshop on Programming Languages and Systems (PLAS 2012)},
	year = {2012},
	author = {A. Lochbihler}
}
@conference {inp:BeckertBruns2012b,
	title = {Mind the Gap: Formal Verification and the {Common} {Criteria}},
	booktitle = {Proceedings of the 6th International Verification Workshop (VERIFY 2010)},
	year = {2012},
	author = {B. Beckert and D. Bruns and S. Grebing}
}
@conference {inp:DimitrovaFinkbeinerKovacsRabeSeidl2012a,
	title = {Model Checking Information Flow in Reactive Systems},
	booktitle = {Proceedings of the 13th International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI 2012)},
	year = {2012},
	author = {R. Dimitrova and B. Finkbeiner and M. Kov{\'a}cs and M. Rabe and H. Seidl}
}
@conference {inp:LehmannLohmann2012a,
	title = {Model support for confidential service-oriented business processes},
	booktitle = {Proceedings of the 4th Central-European Workshop on Services and their Composition (ZEUS 2012)},
	year = {2012},
	address = {Bamberg, Germany},
	author = {A. Lehmann and N. Lohmann}
}
@conference {inp:LehmannLohmann2012b,
	title = {Modeling wizard for confidential Business Processes},
	booktitle = {1st Joint International Workshop on Security in Business Processes (SBP)},
	year = {2012},
	author = {A. Lehmann and N. Lohmann}
}
@conference {inp:EhlersFinkbeiner2011a,
	title = {Monitoring Realizability},
	booktitle = {Proceedings of the 2nd International Conference on Runtime Verification (RV 2011)},
	year = {2012},
	author = {R. Ehlers and B. Finkbeiner}
}
@conference {inc:DimitrovaFinkbeinerRabe2012,
	title = {Monitoring Temporal Information Flow},
	booktitle = {Leveraging Applications of Formal Methods, Verification and Validation. Technologies for Mastering Change},
	year = {2012},
	author = {R. Dimitrova and B. Finkbeiner and M. N. Rabe}
}
@conference {inp:BlanchettePopescuWandWeidenbach2012,
	title = {More SPASS with Isabelle - Superposition with Hard Sorts and Configurable Simplification},
	booktitle = {Proceedings of the 3rd Conference on Interactive Theorem Proving (ITP 2012)},
	year = {2012},
	author = {J. C. Blanchette and A. Popescu and D. Wand and C. Weidenbach}
}
@conference {inp:OchoaJuerjensCuellar2012a,
	title = {Non-interference on {UML} {S}tate-charts},
	booktitle = {Proceedings of the 50th International Conference on Objects, Models, Components, Patterns (TOOLS Europe 2012)},
	year = {2012},
	author = {M. Ochoa and J. J{\"u}rjens and J. C{\'u}ellar}
}
@conference {inp:AtkinsonGerbigKennel2012b,
	title = {On-the-Fly Emendation of Multi-level Models},
	booktitle = {8th European Conference on Modelling Foundations and Applications (ECMFA 2012)},
	year = {2012},
	author = {C. Atkinson and R. Gerbig and B. Kennel}
}
@article {ar:PopescuHoelzl2012,
	title = {Possibilistic Noninterference},
	journal = {Archive of Formal Proofs},
	year = {2012},
	author = {A. Popescu and J. H{\"o}lzl}
}
@conference {inp:PopescuHoelzlNipkow2012,
	title = {Proving Concurrent Noninterference},
	booktitle = {Proceedings of the 2nd International Conference on Certified Programs and Proofs (CPP 2012)},
	year = {2012},
	author = {A. Popescu and J. H{\"o}lzl and T. Nipkow}
}
@conference {inp:KovacsSeidl2012a,
	title = {Runtime Enforcement of Information Flow Security in Tree Manipulating Processes},
	booktitle = {Proceedings of the 4th International Symposium on Engineering Secure Software and Systems (ESSoS 2012)},
	year = {2012},
	author = {M. Kov{\'a}cs and H. Seidl}
}
@conference {inp:LuxMantelPerner2012a,
	title = {Scheduler-Independent Declassification},
	booktitle = {Proceedings of the 11th International Conference on Mathematics of Program Construction (MPC 2012)},
	year = {2012},
	author = {A. Lux and H. Mantel and M. Perner}
}
@conference {inp:PfeifferUngerTimmermannLehmann2012a,
	title = {Secure Information Flow Awareness for Smart Wireless {eHealth} Systems},
	booktitle = {Proceedings of 9th International Multi-Conference on Systems, Signals and Devices (SSD 2012)},
	year = {2012},
	author = {S. Pfeiffer and S. Unger and D. Timmermann and A. Lehmann}
}
@conference {inp:Ochoa2012a,
	title = {Security Guarantees and Evolution: From models to reality},
	booktitle = {Electronic Proceedings of the 1st ESSoS Doctoral Symposium (ESSoS-DS 2012)},
	year = {2012},
	author = {M. Ochoa}
}
@conference {inp:GayMantelSprick2011a,
	title = {Service Automata},
	booktitle = {Proceedings of the 8th International Workshop on Formal Aspects of Security and Trust (FAST 2011)},
	year = {2012},
	author = {R. Gay and H. Mantel and B. Sprick}
}
@conference {inp:OchoaJuerjensWarzecha2012a,
	title = {A Sound Decision Procedure for the Compositionality of Secrecy},
	booktitle = {Proceedings of the 4th International Symposium on Engineering Secure Software and Systems (ESSoS 2012)},
	year = {2012},
	author = {M. Ochoa and J. J{\"u}rjens and D. Warzecha}
}
@conference {inp:LehmannLohmannWolf2012a,
	title = {Stubborn Sets for Simple Linear Time Properties},
	booktitle = {Proceedings of 33rd International Conference on Applications and Theory of Petri Nets and Other Models of Concurrency (PETRI NETS 2012)},
	year = {2012},
	author = {A. Lehmann and N. Lohmann and K. Wolf}
}
@conference {inp:AtkinsonGerbigKennel2012a,
	title = {Symbiotic general-purpose and domain-specific languages},
	booktitle = {Proceedings of the 34th International Conference on Software Engineering (ICSE 2012)},
	year = {2012},
	author = {C. Atkinson and R. Gerbig and B. Kennel}
}
@conference {inp:KelbertPretschner2012,
	title = {{Towards a Policy Enforcement Infrastructure for Distributed Usage Control}},
	booktitle = {Proceedings of the 17th ACM Symposium on Access Control Models and Technologies (SACMAT 2012)},
	year = {2012},
	author = {F. Kelbert and A. Pretschner}
}
@conference {inp:AtkinsonGerbigTunjic2012a,
	title = {Towards Multi-level Aware Model Transformations},
	booktitle = {5th International Conference on Theory and Practice of Model Transformations (ICMT 2012)},
	year = {2012},
	author = {C. Atkinson and R. Gerbig and C. Tunjic}
}
@conference {inp:SchebenSchmitt2012a,
	title = {{Verification of Information Flow Properties of Java Programs without Approximations}},
	booktitle = {Proceedings of the Formal Verification of Object-Oriented Software (FoVeOOS 2011)},
	year = {2012},
	author = {C. Scheben and P. Schmitt}
}
@conference {inp:SchmittSchinzel2012a,
	title = {{WAFFle: Fingerprinting Filter Rules of Web Application Firewalls}},
	booktitle = {{6th USENIX Workshop on Offensive Technologies (WOOT 2012)}},
	year = {2012},
	author = {I. Schmitt and S. Schinzel}
}
@conference {inp:Accorsi2011a,
	title = {Anwenden struktureller Nicht-Interferenz zur Sicherheitsanalyse von Workflow-Modellen},
	booktitle = {Proceedings of INFORMATIK 2011 - Dependable Software for Critical Infrastructures (DSCI 2011)},
	year = {2011},
	author = {R. Accorsi}
}
@conference {inp:MantelSandsSudbrock2011a,
	title = {{Assumptions and Guarantees for Compositional Noninterference}},
	booktitle = {Proceedings of the 24th IEEE Computer Security Foundations Symposium (CSF 2011)},
	year = {2011},
	author = {H. Mantel and D. Sands and H. Sudbrock}
}
@conference {inp:LovatPretschner2011,
	title = {{Data-centric multi-layer usage control enforcement: a Social Network Example}},
	booktitle = {Proceedings of the 16th ACM symposium on Access control models and technologies (SACMAT 2011)},
	year = {2011},
	author = {E. Lovat and A. Pretschner}
}
@conference {inp:FreilingSchinzel2011a,
	title = {Detecting Hidden Storage Side Channel Vulnerabilities in Networked Applications},
	booktitle = {Proceedings of the 26th International Information Security Conference (IFIP/SEC 2011)},
	year = {2011},
	author = {F. Freiling and S. Schinzel}
}
@conference {inp:KumariPretschnerPeschlaKuhn2011a,
	title = {Distributed Data Usage Control for Web Applications: A Social Network Implementation},
	booktitle = {Proceedings of the 1st ACM Conference on Data and Application Security and Privacy (CODASPY 2011)},
	year = {2011},
	author = {P. Kumari and A. Pretschner and J. Peschla and J.-M. Kuhn}
}
@conference {inp:Schinzel2011a,
	title = {An Efficient Mitigation Method for Timing Side Channels on the Web},
	booktitle = {Proceedings of the 2nd International Workshop on Constructive Side-Channel Analysis and Secure Design (COSADE 2011)},
	year = {2011},
	author = {S. Schinzel}
}
@conference {inp:GawlitzaLMSW2011,
	title = {Join-Lock-Sensitive Forward Reachability Analysis for Concurrent Programs with Dynamic Process Creation},
	booktitle = {Proceedings of the 12th International Conference on Verification, Model Checking, and Abstract Interpretation (VMCAI 2011)},
	year = {2011},
	author = {T. M. Gawlitza and P. Lammich and M. M{\"u}ller-Olm and H. Seidl and A. Wenner}
}
@conference {inp:HadaschMuellerMaedche2011a,
	title = {Leaking Confidential Information by Non-Malicious User Behaviour in Enterprise Systems - Design of an Empirical Study},
	booktitle = {Proceedings of the 6th Mediterranean Conference on Information Systems (MCIS 2011)},
	year = {2011},
	author = {F. Hadasch and B. Mueller and A. Maedche}
}
@conference {inp:PretschnerLovatBuechler2011,
	title = {{Representation-Independent Data Usage Control}},
	booktitle = {6th International Workshop on Data Privacy Management (DPM 2011)},
	year = {2011},
	author = {A. Pretschner and E. Lovat and M. Buechler}
}
@conference {inp:SchwarzSVLM11,
	title = {Static Analysis of Interrupt-Driven Programs Synchronized via the Priority Ceiling Protocol},
	booktitle = {Proceedings of the 38th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL 2011)},
	year = {2011},
	author = {M. D. Schwarz and H. Seidl and V. Vojdani and P. Lammich and M. M{\"u}ller-Olm}
}
@conference {inp:AccorsiWonnemann2011a,
	title = {Strong non-leak guarantees for workflow models},
	booktitle = {Proceedings of the 26th ACM Symposium on Applied Computing (SAC 2011)},
	year = {2011},
	author = {R. Accorsi and C. Wonnemann}
}
@conference {inp:KuestersTruderungVogt2011a,
	title = {{Verifiability, Privacy, and Coercion-Resistance: New Insights from a Case Study}},
	booktitle = {Proceedings of the 32nd IEEE Symposium on Security and Privacy (S{\&}P 2011)},
	year = {2011},
	author = {R. K{\"u}sters and T. Truderung and A. Vogt}
}
@conference {inp:Hammer2010a,
	title = {Experiences with PDG-based IFC},
	booktitle = {Proceedings of the 2nd International Symposium on Engineering Secure Software and Systems (ESSoS 2010)},
	year = {2010},
	author = {C. Hammer}
}
@conference {inp:TaghdiriSneltingSinz2010a,
	title = {Information Flow Analysis via Path Condition Refinement},
	booktitle = {Proceedings of the 7th International Workshop on Formal Aspects of Security and Trust (FAST 2010)},
	year = {2010},
	author = {M. Taghdiri and G. Snelting and C. Sinz}
}
@conference {inp:KuestersTruderungVogt2010a,
	title = {{Proving Coercion-Resistance of Scantegrity II}},
	booktitle = {Proceedings of the 12th International Conference on Information and Communications Security (ICICS 2010)},
	year = {2010},
	author = {R. K{\"u}sters and T. Truderung and A. Vogt}
}
@conference {inp:WasserabLohner2010a,
	title = {Proving Information Flow Noninterference by Reusing a Machine-Checked Correctness Proof for Slicing},
	booktitle = {6th International Verification Workshop (VERIFY 2010)},
	year = {2010},
	author = {D. Wasserrab and D. Lohner}
}
