Andrei Sabelfeld

135 papers A* 12A 31B 8C 7Misc 6Journal 26Unranked 41
YearRankTypeTitle / Venue / Authors
2025 — conf
CodeX: Contextual Flow Tracking for Browser Extensions.
CODASPY
Mohammad M. Ahmadpanah, Matías F. Gobbi, Daniel Hedin, Johannes Kinder, Andrei Sabelfeld
2024 A conf
FakeX: A Framework for Detecting Fake Reviews of Browser Extensions.
AsiaCCS
Eric Olsson, Benjamin Eriksson, Pablo Picazo-Sanchez, Lukas Andersson, Andrei Sabelfeld
2024 A* conf
Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS.
USENIX Security Symposium
Eric Olsson, Benjamin Eriksson, Adam Doupé, Andrei Sabelfeld
2023 A* conf
Black Ostrich: Web Application Scanning with String Solvers.
CCS
Benjamin Eriksson, Amanda Stjerna, Riccardo De Masellis, Philipp Rümmer, Andrei Sabelfeld
2023 A* conf
LazyTAP: On-Demand Data Minimization for Trigger-Action Applications.
SP
Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld
2023 A* conf
Poster: Data Minimization by Construction for Trigger-Action Applications.
CCS
Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld
2022 J jnl
Are chrome extensions compliant with the spirit of least privilege?
Int. J. Inf. Sec.
Pablo Picazo-Sanchez, Lara Ortiz-Martin, Gerardo Schneider, Andrei Sabelfeld
2022 C conf
CatNap: Leveraging Generic MPC for Actively Secure Privacy-enhancing Proximity Testing with a Napping Party.
SECRYPT
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
2022 C conf
DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication.
ICISSP
Pablo Picazo-Sanchez, Maximilian Algehed, Andrei Sabelfeld
2022 Misc conf
Hardening the security analysis of browser extensions.
SAC
Benjamin Eriksson, Pablo Picazo-Sanchez, Andrei Sabelfeld
2022 A conf
No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns.
ACSAC
Pablo Picazo-Sanchez, Benjamin Eriksson, Andrei Sabelfeld
2022 — conf
Outsourcing MPC Precomputation for Location Privacy.
EuroS&P Workshops
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
2022 A* conf
Practical Data Access Minimization in Trigger-Action Platforms.
USENIX Security Symposium
Yunang Chen, Mohannad Alhanahnah, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
2022 B conf
SecWasm: Information Flow Control for WebAssembly.
SAS
Iulia Bastys, Maximilian Algehed, Alexander Sjösten, Andrei Sabelfeld
2021 A* conf
Black Widow: Blackbox Data-driven Web Scanning.
SP
Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld
2021 A* conf
Data Privacy in Trigger-Action Systems.
SP
Yunang Chen, Amrita Roy Chowdhury, Ruizhe Wang, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
2021 — conf
EssentialFP: Exposing the Essence of Browser Fingerprinting.
EuroS&P Workshops
Alexander Sjösten, Daniel Hedin, Andrei Sabelfeld
2021 A conf
Nontransitive Policies Transpiled.
EuroS&P
Mohammad M. Ahmadpanah, Aslan Askarov, Andrei Sabelfeld
2021 A* conf
SandTrap: Securing JavaScript-driven Trigger-Action Platforms.
USENIX Security Symposium
Mohammad M. Ahmadpanah, Daniel Hedin, Musard Balliu, Lars Eric Olsson, Andrei Sabelfeld
2021 — conf
Securing Node-RED Applications.
Protocols, Strands, and Logic
Mohammad M. Ahmadpanah, Musard Balliu, Daniel Hedin, Lars Eric Olsson, Andrei Sabelfeld
2020 A* conf
AutoNav: Evaluation and Automatization of Web Navigation Policies.
WWW
Benjamin Eriksson, Andrei Sabelfeld
2020 A conf
Clockwork: Tracking Remote Timing Attacks.
CSF
Iulia Bastys, Musard Balliu, Tamara Rezk, Andrei Sabelfeld
2020 J jnl
Data Privacy in Trigger-Action IoT Systems.
CoRR
Yunang Chen, Amrita Roy Chowdhury, Ruizhe Wang, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
2020 B conf
HMAC and "Secure Preferences": Revisiting Chromium-Based Browsers Security.
CANS
Pablo Picazo-Sanchez, Gerardo Schneider, Andrei Sabelfeld
2020 J jnl
VERONICA: Expressive and Precise Concurrent Information Flow Security (Extended Version with Technical Appendices).
CoRR
Daniel Schoepe, Toby Murray, Andrei Sabelfeld
2020 A conf
VERONICA: Expressive and Precise Concurrent Information Flow Security.
CSF
Daniel Schoepe, Toby Murray, Andrei Sabelfeld
2020 — conf
Where Are You Bob? Privacy-Preserving Proximity Testing with a Napping Party.
ESORICS (1)
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
2020 J jnl
Where are you Bob? Privacy-Preserving Proximity Testing with a Napping Party.
IACR Cryptol. ePrint Arch.
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
2019 — conf
An Empirical Study of Information Flows in Real-World JavaScript.
PLAS@CCS
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
2019 J jnl
An Empirical Study of Information Flows in Real-World JavaScript.
CoRR
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
2019 A conf
Information-Flow Control for Database-Backed Applications.
EuroS&P
Marco Guarnieri, Musard Balliu, Daniel Schoepe, David A. Basin, Andrei Sabelfeld
2019 A* conf
Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks.
NDSS
Alexander Sjösten, Steven Van Acker, Pablo Picazo-Sanchez, Andrei Sabelfeld
2019 C conf
On the Road with Third-party Apps: Security Analysis of an In-vehicle App Platform.
VEHITS
Benjamin Eriksson, Jonas Groth, Andrei Sabelfeld
2019 J jnl
Securing IoT Apps.
IEEE Secur. Priv.
Musard Balliu, Iulia Bastys, Andrei Sabelfeld
2019 J jnl
TOPPool: Time-aware Optimized Privacy-Preserving Ridesharing.
Proc. Priv. Enhancing Technol.
Elena Pagnin, Gunnar Gunnarsson, Pedram Talebi, Claudio Orlandi, Andrei Sabelfeld
2018 J jnl
Assuring BetterTimes.
J. Comput. Secur.
Per A. Hallgren, Ravi Kishore, Martín Ochoa, Andrei Sabelfeld
2018 A* conf
If This Then What?: Controlling Flows in IoT Apps.
CCS
Iulia Bastys, Musard Balliu, Andrei Sabelfeld
2018 C conf
Information Flow Tracking for Side-Effectful Libraries.
FORTE
Alexander Sjösten, Daniel Hedin, Andrei Sabelfeld
2018 — conf
Prudent Design Principles for Information Flow Control.
PLAS@CCS
Iulia Bastys, Frank Piessens, Andrei Sabelfeld
2018 A conf
Raising the Bar: Evaluating Origin-wide Security Manifests.
ACSAC
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
2018 — conf
Tracking Information Flow via Delayed Output - Addressing Privacy in IoT and Emailing Apps.
NordSec
Iulia Bastys, Frank Piessens, Andrei Sabelfeld
2017 — conf
A Principled Approach to Tracking Information Flow in the Presence of Libraries.
POST
Daniel Hedin, Alexander Sjösten, Frank Piessens, Andrei Sabelfeld
2017 — conf
Discovering Browser Extensions via Web Accessible Resources.
CODASPY
Alexander Sjösten, Steven Van Acker, Andrei Sabelfeld
2017 Misc conf
Measuring login webpage security.
SAC
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
2017 C conf
Privacy-Preserving Location-Proximity for Mobile Apps.
PDP
Simonas Stirbys, Omar Abu Nabah, Per A. Hallgren, Andrei Sabelfeld
2017 A conf
PrivatePool: Privacy-Preserving Ridesharing.
CSF
Per A. Hallgren, Claudio Orlandi, Andrei Sabelfeld
2017 J jnl
Special issue on verified information flow security.
J. Comput. Secur.
Toby C. Murray, Andrei Sabelfeld, Lujo Bauer
2017 — conf
We Are Family: Relating Information-Flow Trackers.
ESORICS (1)
Musard Balliu, Daniel Schoepe, Andrei Sabelfeld
2016 A conf
Data Exfiltration in the Face of CSP.
AsiaCCS
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
2016 A conf
Explicit Secrecy: A Policy for Taint Tracking.
EuroS&P
Daniel Schoepe, Musard Balliu, Benjamin C. Pierce, Andrei Sabelfeld
2016 J jnl
Information-flow security for JavaScript and its APIs.
J. Comput. Secur.
Daniel Hedin, Luciano Bello, Andrei Sabelfeld
2016 — conf
JSLINQ: Building Secure Applications across Tiers.
CODASPY
Musard Balliu, Benjamin Liebe, Daniel Schoepe, Andrei Sabelfeld
2016 — conf
JavaScript Sandboxing: Isolating and Restricting Client-Side JavaScript.
FOSAD
Steven Van Acker, Andrei Sabelfeld
2016 — conf
Let's Face It: Faceted Values for Taint Tracking.
ESORICS (1)
Daniel Schoepe, Musard Balliu, Frank Piessens, Andrei Sabelfeld
2016 A conf
Location-enhanced authentication using the IoT: because you cannot be in two places at once.
ACSAC
Ioannis Agadakos, Per A. Hallgren, Dimitrios Damopoulos, Andrei Sabelfeld, Georgios Portokalidis
2016 — conf
MaxPace: Speed-constrained location queries.
CNS
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
2016 — conf
Progress-Sensitive Security for SPARK.
ESSoS
Willard Rafnsson, Deepak Garg, Andrei Sabelfeld
2016 J jnl
Secure multi-execution: Fine-grained, declassification-aware, and transparent.
J. Comput. Secur.
Willard Rafnsson, Andrei Sabelfeld
2015 C conf
BetterTimes - Privacy-Assured Outsourced Multiplications for Additively Homomorphic Encryption on Finite Fields.
ProvSec
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
2015 C conf
InnerCircle: A parallelizable decentralized privacy-preserving location proximity protocol.
PST
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
2015 B conf
May I? - Content Security Policy Endorsement for Browser Extensions.
DIMVA
Daniel Hausknecht, Jonas Magazinius, Andrei Sabelfeld
2015 — conf
Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right.
CODASPY
Steven Van Acker, Daniel Hausknecht, Wouter Joosen, Andrei Sabelfeld
2015 A conf
Understanding and Enforcing Opacity.
CSF
Daniel Schoepe, Andrei Sabelfeld
2015 B conf
Value Sensitivity and Observable Abstract Values for Information Flow Control.
LPAR
Luciano Bello, Daniel Hedin, Andrei Sabelfeld
2015 A conf
Value-Sensitive Hybrid Information Flow Control for a JavaScript-Like Language.
CSF
Daniel Hedin, Luciano Bello, Andrei Sabelfeld
2015 Misc conf
Web Application Security Using JSFlow.
SYNASC
Daniel Hedin, Andrei Sabelfeld
2014 — conf
Architectures for Inlining Security Monitors in Web Applications.
ESSoS
Jonas Magazinius, Daniel Hedin, Andrei Sabelfeld
2014 A conf
Compositional Information-Flow Security for Interactive Systems.
CSF
Willard Rafnsson, Andrei Sabelfeld
2014 Misc conf
JSFlow: tracking information flow in JavaScript and its APIs.
SAC
Daniel Hedin, Arnar Birgisson, Luciano Bello, Andrei Sabelfeld
2014 J jnl
Preface.
J. Comput. Secur.
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
2014 A conf
SeLINQ: tracking information across application-database boundaries.
ICFP
Daniel Schoepe, Daniel Hedin, Andrei Sabelfeld
2013 — conf
GlassTube: a lightweight approach to web application integrity.
PLAS
Per A. Hallgren, Daniel T. Mauritzson, Andrei Sabelfeld
2013 A* conf
Polyglots: crossing origins by crossing formats.
CCS
Jonas Magazinius, Billy K. Rios, Andrei Sabelfeld
2013 A conf
Secure Multi-execution: Fine-Grained, Declassification-Aware, and Transparent.
CSF
Willard Rafnsson, Andrei Sabelfeld
2013 J jnl
Securing Class Initialization in Java-like Languages.
IEEE Trans. Dependable Secur. Comput.
Willard Rafnsson, Keiko Nakata, Andrei Sabelfeld
2012 — ch.
A Perspective on Information-Flow Control.
Software Safety and Security
Daniel Hedin, Andrei Sabelfeld
2012 A conf
Boosting the Permissiveness of Dynamic Information-Flow Tracking by Testing.
ESORICS
Arnar Birgisson, Daniel Hedin, Andrei Sabelfeld
2012 A conf
Information-Flow Security for a Core of JavaScript.
CSF
Daniel Hedin, Andrei Sabelfeld
2012 J jnl
On-the-fly inlining of dynamic security monitors.
Comput. Secur.
Jonas Magazinius, Alejandro Russo, Andrei Sabelfeld
2012 A conf
Securing Interactive Programs.
CSF
Willard Rafnsson, Daniel Hedin, Andrei Sabelfeld
2012 J jnl
Web Application Security (Dagstuhl Seminar 12401).
Dagstuhl Reports
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
2011 — conf
Capabilities for information flow.
PLAS
Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld
2011 B conf
Decentralized Delimited Release.
APLAS
Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld
2011 — conf
Limiting information leakage in event-based communication.
PLAS
Willard Rafnsson, Andrei Sabelfeld
2011 A conf
Multi-run Security.
ESORICS
Arnar Birgisson, Andrei Sabelfeld
2010 A conf
A lattice-based approach to mashup security.
AsiaCCS
Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld
2010 A conf
Dynamic vs. Static Flow-Sensitive Security Analysis.
CSF
Alejandro Russo, Andrei Sabelfeld
2010 — ch.
Implicit flows in malicious and nonmalicious code.
Logics and Languages for Reliability and Security
Alejandro Russo, Andrei Sabelfeld, Keqin Li
2010 Misc conf
On-the-fly Inlining of Dynamic Security Monitors.
SEC
Jonas Magazinius, Alejandro Russo, Andrei Sabelfeld
2010 J jnl
Preface.
J. Comput. Secur.
Andrei Sabelfeld
2010 — conf
Securing Class Initialization.
IFIPTM
Keiko Nakata, Andrei Sabelfeld
2010 J jnl
Security of multithreaded programs by compilation.
ACM Trans. Inf. Syst. Secur.
Gilles Barthe, Tamara Rezk, Alejandro Russo, Andrei Sabelfeld
2010 Misc conf
Unifying Facets of Information Integrity.
ICISS
Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld
2009 — conf
Catch me if you can: permissive yet secure error handling.
PLAS
Aslan Askarov, Andrei Sabelfeld
2009 J jnl
Declassification: Dimensions and principles.
J. Comput. Secur.
Andrei Sabelfeld, David Sands
2009 — conf
From Dynamic to Static and Back: Riding the Roller Coaster of Information-Flow Control Research.
Ershov Memorial Conference
Andrei Sabelfeld, Alejandro Russo
2009 A conf
Securing Timeout Instructions in Web Applications.
CSF
Alejandro Russo, Andrei Sabelfeld
2009 J jnl
Securing interaction between threads and the scheduler in the presence of synchronization.
J. Log. Algebraic Methods Program.
Alejandro Russo, Andrei Sabelfeld
2009 A conf
Tight Enforcement of Information-Release Policies for Dynamic Languages.
CSF
Aslan Askarov, Andrei Sabelfeld
2009 A conf
Tracking Information Flow in Dynamic Tree Structures.
ESORICS
Alejandro Russo, Andrei Sabelfeld, Andrey Chudnov
2008 J jnl
Cryptographically-masked flows.
Theor. Comput. Sci.
Aslan Askarov, Daniel Hedin, Andrei Sabelfeld
2008 J jnl
Preface.
J. Comput. Secur.
Andrei Sabelfeld
2008 A conf
Termination-Insensitive Noninterference Leaks More Than Just a Bit.
ESORICS
Aslan Askarov, Sebastian Hunt, Andrei Sabelfeld, David Sands
2007 — conf
07091 Abstracts Collection - Mobility, Ubiquity and Security.
Mobility, Ubiquity and Security
Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, Andrei Sabelfeld
2007 — conf
07091 Executive Summary - Mobility, Ubiquity and Security.
Mobility, Ubiquity and Security
Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, Andrei Sabelfeld
2007 — conf
Dimensions of Declassification in Theory and Practice.
ASIAN
Andrei Sabelfeld
2007 — conf
Gradual Release: Unifying Declassification, Encryption and Key Release Policies.
S&P
Aslan Askarov, Andrei Sabelfeld
2007 — conf
Localized delimited release: combining the what and where dimensions of information release.
PLAS
Aslan Askarov, Andrei Sabelfeld
2007 — ed.
Mobility, Ubiquity and Security, 25.02. - 02.03.2007
Mobility, Ubiquity and Security
Gilles Barthe, Heiko Mantel, Peter Müller, Andrew C. Myers, Andrei Sabelfeld
2007 A conf
Security of Multithreaded Programs by Compilation.
ESORICS
Gilles Barthe, Tamara Rezk, Alejandro Russo, Andrei Sabelfeld
2006 — conf
Closing Internal Timing Channels by Transformation.
ASIAN
Alejandro Russo, John Hughes, David A. Naumann, Andrei Sabelfeld
2006 A ed.
Computer Security - ESORICS 2006, 11th European Symposium on Research in Computer Security, Hamburg, Germany, September 18-20, 2006, Proceedings
ESORICS
Dieter Gollmann, Jan Meier, Andrei Sabelfeld
2006 B conf
Cryptographically-Masked Flows.
SAS
Aslan Askarov, Daniel Hedin, Andrei Sabelfeld
2006 J jnl
Enforcing Robust Declassification and Qualified Robustness.
J. Comput. Secur.
Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic
2006 — conf
Securing Interaction between Threads and the Scheduler.
CSFW
Alejandro Russo, Andrei Sabelfeld
2006 — conf
Security for Multithreaded Programs Under Cooperative Scheduling.
Ershov Memorial Conference
Alejandro Russo, Andrei Sabelfeld
2005 J jnl
"Language-Based Security".
J. Funct. Program.
Martín Abadi, Greg Morrisett, Andrei Sabelfeld
2005 B conf
Bridging Language-Based and Process Calculi Security.
FoSSaCS
Riccardo Focardi, Sabina Rossi, Andrei Sabelfeld
2005 — conf
Dimensions and Principles of Declassification.
CSFW
Andrei Sabelfeld, David Sands
2005 — ed.
Language-Based Security, 5.-10. October 2003
Language-Based Security
Anindya Banerjee, Heiko Mantel, David A. Naumann, Andrei Sabelfeld
2005 A conf
Security-Typed Languages for Implementation of Cryptographic Protocols: A Case Study.
ESORICS
Aslan Askarov, Andrei Sabelfeld
2004 — conf
Enforcing Robust Declassification.
CSFW
Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic
2003 — conf
03411 Abstracts Collection - Language Based Security.
Language Based Security
Anindya Banerjee, Heiko Mantel, David A. Naumann, Andrei Sabelfeld
2003 — conf
03411 Final Report - Language Based Security.
Language Based Security
Anindya Banerjee, Heiko Mantel, David A. Naumann, Andrei Sabelfeld
2003 — conf
A Model for Delimited Information Release.
ISSS
Andrei Sabelfeld, Andrew C. Myers
2003 J jnl
A Unifying Approach to the Security of Distributed and Multi-Threaded Programs.
J. Comput. Secur.
Heiko Mantel, Andrei Sabelfeld
2003 — conf
Confidentiality for Multithreaded Programs via Bisimulation.
Ershov Memorial Conference
Andrei Sabelfeld
2003 J jnl
Language-based information-flow security.
IEEE J. Sel. Areas Commun.
Andrei Sabelfeld, Andrew C. Myers
2002 B conf
Securing Communication in a Concurrent Language.
SAS
Andrei Sabelfeld, Heiko Mantel
2001 — conf
A Generic Approach to the Security of Multi-Threaded Programs.
CSFW
Heiko Mantel, Andrei Sabelfeld
2001 J jnl
A Per Model of Secure Information Flow in Sequential Programs.
High. Order Symb. Comput.
Andrei Sabelfeld, David Sands
2001 — conf
The Impact of Synchronisation on Secure Information Flow in Concurrent Programs.
Ershov Memorial Conference
Andrei Sabelfeld
2000 — conf
Probabilistic Noninterference for Multi-Threaded Programs.
CSFW
Andrei Sabelfeld, David Sands
1999 A conf
A Per Model of Secure Information Flow in Sequential Programs.
ESOP
Andrei Sabelfeld, David Sands
1997 A conf
Simple Semantic Analysis Problems for Functional Programs.
ICFP
Viktor K. Sabelfeld, Andrei Sabelfeld