{"id":"https://openalex.org/W138704664","doi":null,"title":"Verifying Operating System Security","display_name":"Verifying Operating System Security","publication_year":null,"publication_date":null,"ids":{"openalex":"https://openalex.org/W138704664","mag":"138704664"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.30.4465","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.30.4465","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.eros-os.org/devel/../papers/MS-CIS-97-26.ps","raw_type":"text"},"volume":null,"type":"article","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"J. S. Shapiro","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"J. S. Shapiro","raw_affiliation_strings":["#N#               * University of Pennsylvania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"#N#               * University of Pennsylvania","institution_ids":["https://openalex.org/I79576946"]}]},{"author_position":"last","author":{"id":null,"display_name":"S. Weber","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"S. Weber","raw_affiliation_strings":["#N#               * University of Pennsylvania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"#N#               * University of Pennsylvania","institution_ids":["https://openalex.org/I79576946"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I79576946"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8241999745368958,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.8241999745368958,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.17030000686645508,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/operating-system-security","display_name":"operating system security","score":0.8149999976158142},{"id":"https://openalex.org/keywords/confinement","display_name":"confinement","score":0.8560000061988831},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.8190000057220459},{"id":"https://openalex.org/keywords/capability-based-security","display_name":"capability-based security","score":0.7120000123977661},{"id":"https://openalex.org/keywords/information-flow-control","display_name":"information flow control","score":0.7210000157356262},{"id":"https://openalex.org/keywords/type-soundness","display_name":"type soundness","score":0.7379999756813049},{"id":"https://openalex.org/keywords/type-inference","display_name":"type inference","score":0.7250000238418579},{"id":"https://openalex.org/keywords/operational-semantics","display_name":"operational semantics","score":0.6480000019073486},{"id":"https://openalex.org/keywords/security-policy","display_name":"security policy","score":0.574999988079071},{"id":"https://openalex.org/keywords/component-based-systems","display_name":"component-based systems","score":0.5740000009536743}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8009939193725586},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.6408125758171082},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.6070315837860107},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.5189809203147888},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.45144790410995483},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.43999290466308594},{"id":"https://openalex.org/C156325763","wikidata":"https://www.wikidata.org/wiki/Q1930895","display_name":"Operational semantics","level":3,"score":0.4309406876564026},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.38333624601364136},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.36375901103019714},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3427637815475464},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2650706171989441},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.17415717244148254},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.1434975564479828},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.30.4465","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.30.4465","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.eros-os.org/devel/../papers/MS-CIS-97-26.ps","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.44.4902","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.44.4902","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://linc2.cis.upenn.edu/~shap/EROS/MS-CIS-97-26.ps.gz","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.473.407","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.473.407","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.macslab.com/papers/MS-CIS-97-26.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.79.7866","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.79.7866","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.eros-os.org/papers/MS-CIS-97-26.ps","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W109873528","https://openalex.org/W1484434084","https://openalex.org/W1520961854","https://openalex.org/W2099137371","https://openalex.org/W2113350481","https://openalex.org/W2148267441","https://openalex.org/W2342083136"],"related_works":["https://openalex.org/W2166438839","https://openalex.org/W562697063","https://openalex.org/W2025429468","https://openalex.org/W578517468","https://openalex.org/W823343027","https://openalex.org/W3142597253","https://openalex.org/W7096581238","https://openalex.org/W3009909732","https://openalex.org/W1968300113","https://openalex.org/W2557853233"],"abstract_inverted_index":{"A":[0],"confined":[1,84],"program":[2],"is":[3,6,20],"one":[4],"which":[5,160],"unable":[7],"to":[8,11,44,151,167,186,189,197],"leak":[9],"information":[10,191],"an":[12,21],"unauthorized":[13,17],"party":[14],"or":[15,100],"modify":[16],"resources.":[18],"Confinement":[19],"essential":[22],"feature":[23],"of":[24,34,36,51,57,78,97,102,143,153,175],"any":[25,180,198],"secure":[26],"component-based":[27],"system.":[28,200],"This":[29,135],"paper":[30],"presents":[31],"a":[32,48,55,75,126,173],"proof":[33,171],"correctness":[35],"the":[37,52,58,68,71,83,94,103,116,122,132,137,140],"EROS":[38],"operating":[39,123],"system":[40,124,181],"architecture":[41,69],"with":[42],"respect":[43],"confinement.":[45],"We":[46,120],"give":[47],"formal":[49],"statement":[50],"requirements,":[53],"construct":[54],"model":[56],"architecture\u2019s":[59],"security":[60,141],"policy":[61],"and":[62,65,156],"operational":[63],"semantics,":[64],"show":[66],"that":[67,139,179],"enforces":[70],"confinement":[72],"requirements":[73,142],"if":[74],"small":[76],"number":[77],"initial":[79],"static":[80],"checks":[81],"on":[82,93],"subsystem":[85],"are":[86,131,164],"satisfied.":[87],"The":[88,170,193],"mechanism":[89],"does":[90],"not":[91],"rely":[92],"run-time":[95],"values":[96],"user":[98],"state":[99],"analysis":[101],"programs":[104],"\u2019":[105],"algorithm(s).":[106],"Our":[107],"verification":[108],"methodology":[109],"borrows":[110],"heavily":[111],"from":[112],"techniques":[113,163],"developed":[114],"in":[115,148,184],"programming":[117,127,161],"languages":[118],"com-munity.":[119],"view":[121],"as":[125],"language":[128,162],"whose":[129],"operations":[130],"kernel":[133],"calls.":[134],"has":[136],"advantage":[138],"concern":[144],"can":[145],"be":[146,187],"stated":[147],"forms":[149],"analogous":[150],"those":[152],"type":[154,157],"inference":[155],"soundness":[158],"\u2013":[159],"well":[165],"suited":[166],"deal":[168],"with.":[169],"identifies":[172],"set":[174],"necessary":[176],"fundamental":[177],"lemmas":[178],"must":[182],"observe":[183],"order":[185],"able":[188],"confine":[190],"flow.":[192],"method":[194],"used":[195],"generalizes":[196],"capability":[199]},"counts_by_year":[{"year":2014,"cited_by_count":1}],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2025-10-27T00:00:00"}