{"id":"https://openalex.org/W2147939735","doi":null,"title":"Information flow control for secure web sites","display_name":"Information flow control for secure web sites","publication_year":2008,"publication_date":"2008-01-01","ids":{"openalex":"https://openalex.org/W2147939735","mag":"2147939735"},"language":"en","primary_location":{"id":"pmh:oai:dspace.mit.edu:1721.1/45864","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1721.1/45864","pdf_url":"https://dspace.mit.edu/bitstreams/3254aa45-d473-4d83-b784-6ff576090773/download","source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"volume":null,"type":"dissertation","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://dspace.mit.edu/bitstreams/3254aa45-d473-4d83-b784-6ff576090773/download","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109968020","display_name":"M. Frans Kaashoek","orcid":"https://orcid.org/0000-0001-7098-586X","observed_orcids":["https://orcid.org/0000-0001-7098-586X"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Frans Kaashoek","raw_affiliation_strings":["Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066545991","display_name":"Robert Morris","orcid":"https://orcid.org/0000-0001-8320-2393","observed_orcids":["https://orcid.org/0000-0001-8320-2393","https://orcid.org/0009-0009-6885-0208"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Morris","raw_affiliation_strings":["Massachusetts Institute Of Technology#TAB#"],"raw_orcid":"https://orcid.org/0000-0001-8320-2393","affiliations":[{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046950574","display_name":"Eddie Kohler","orcid":"https://orcid.org/0000-0003-2027-0035","observed_orcids":["https://orcid.org/0000-0003-2027-0035"]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eddie Kohler","raw_affiliation_strings":["Massachusetts Institute Of Technology#TAB#"],"raw_orcid":"https://orcid.org/0000-0003-2027-0035","affiliations":[{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022538464","display_name":"Maxwell Krohn","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Maxwell Krohn","raw_affiliation_strings":["Massachusetts Institute Of Technology#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Massachusetts Institute Of Technology#TAB#","institution_ids":["https://openalex.org/I63966007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63966007"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9541000127792358,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9541000127792358,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.017000000923871994,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10126","display_name":"Logic, programming, and type systems","score":0.00430000014603138,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-flow-control","display_name":"information flow control","score":0.8510000109672546},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.8220000267028809},{"id":"https://openalex.org/keywords/trusted-computing-base","display_name":"trusted computing base","score":0.7850000262260437},{"id":"https://openalex.org/keywords/flume","display_name":"flumes","score":0.875},{"id":"https://openalex.org/keywords/end-points","display_name":"end points","score":0.7139999866485596},{"id":"https://openalex.org/keywords/operating-system-interfaces","display_name":"operating system interfaces","score":0.7160000205039978},{"id":"https://openalex.org/keywords/data-loss-prevention","display_name":"data loss prevention","score":0.5789999961853027},{"id":"https://openalex.org/keywords/security-policy-enforcement","display_name":"security policy enforcement","score":0.4259999990463257}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6743401885032654},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.5233268737792969},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5185392498970032},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.515629231929779},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4889024794101715},{"id":"https://openalex.org/C2781466463","wikidata":"https://www.wikidata.org/wiki/Q621695","display_name":"Blame","level":2,"score":0.4217895269393921},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.41379982233047485},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3738206923007965},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.3038645386695862},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.11498954892158508},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C118552586","wikidata":"https://www.wikidata.org/wiki/Q7867","display_name":"Psychiatry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:dspace.mit.edu:1721.1/45864","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1721.1/45864","pdf_url":"https://dspace.mit.edu/bitstreams/3254aa45-d473-4d83-b784-6ff576090773/download","source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.217.8424","doi":null,"is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.217.8424","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.pdos.lcs.mit.edu/~max/docs/krohn-thesis.pdf","raw_type":"text"},{"id":"mag:2147939735","doi":null,"is_oa":false,"landing_page_url":"https://www.cs.yale.edu/homes/dsc5/papers/krohn-thesis.pdf","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:dspace.mit.edu:1721.1/45864","doi":null,"is_oa":true,"landing_page_url":"http://hdl.handle.net/1721.1/45864","pdf_url":"https://dspace.mit.edu/bitstreams/3254aa45-d473-4d83-b784-6ff576090773/download","source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Thesis"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2147939735.pdf","grobid_xml":"https://content.openalex.org/works/W2147939735.grobid-xml"},"referenced_works_count":78,"referenced_works":["https://openalex.org/W23242426","https://openalex.org/W71622742","https://openalex.org/W192036632","https://openalex.org/W1487134436","https://openalex.org/W1488890761","https://openalex.org/W1491237615","https://openalex.org/W1497651746","https://openalex.org/W1498527206","https://openalex.org/W1515052812","https://openalex.org/W1516211918","https://openalex.org/W1516432943","https://openalex.org/W1554490792","https://openalex.org/W1571487936","https://openalex.org/W1587010340","https://openalex.org/W1606518565","https://openalex.org/W1606544643","https://openalex.org/W1655226010","https://openalex.org/W1739542898","https://openalex.org/W1977764760","https://openalex.org/W1985439562","https://openalex.org/W1991895580","https://openalex.org/W2038019800","https://openalex.org/W2040234252","https://openalex.org/W2040669676","https://openalex.org/W2050959726","https://openalex.org/W2056073317","https://openalex.org/W2066437172","https://openalex.org/W2075325892","https://openalex.org/W2083228150","https://openalex.org/W2086234010","https://openalex.org/W2088923183","https://openalex.org/W2089661946","https://openalex.org/W2092423386","https://openalex.org/W2094873755","https://openalex.org/W2095881341","https://openalex.org/W2109914336","https://openalex.org/W2117115928","https://openalex.org/W2117362057","https://openalex.org/W2119085032","https://openalex.org/W2122049982","https://openalex.org/W2122847456","https://openalex.org/W2122960384","https://openalex.org/W2123022344","https://openalex.org/W2126860147","https://openalex.org/W2129384397","https://openalex.org/W2131300413","https://openalex.org/W2131906261","https://openalex.org/W2132185316","https://openalex.org/W2132449052","https://openalex.org/W2133239972","https://openalex.org/W2134296086","https://openalex.org/W2136296832","https://openalex.org/W2136624255","https://openalex.org/W2144404337","https://openalex.org/W2148144728","https://openalex.org/W2150858564","https://openalex.org/W2153704625","https://openalex.org/W2154220454","https://openalex.org/W2157101539","https://openalex.org/W2161954933","https://openalex.org/W2162022335","https://openalex.org/W2162283517","https://openalex.org/W2162316255","https://openalex.org/W2163706363","https://openalex.org/W2164886052","https://openalex.org/W2166510103","https://openalex.org/W2167510195","https://openalex.org/W2167800525","https://openalex.org/W2171829095","https://openalex.org/W2173213060","https://openalex.org/W2173638604","https://openalex.org/W2174103411","https://openalex.org/W2250087160","https://openalex.org/W2266218113","https://openalex.org/W2476848288","https://openalex.org/W2499974232","https://openalex.org/W2916447643","https://openalex.org/W3144368627"],"related_works":["https://openalex.org/W2162283517","https://openalex.org/W2301803841","https://openalex.org/W2171934742","https://openalex.org/W4283360999","https://openalex.org/W1495495588","https://openalex.org/W4212764898","https://openalex.org/W2143406523","https://openalex.org/W7096301682","https://openalex.org/W226359953","https://openalex.org/W7037014476"],"abstract_inverted_index":{"Sometimes":[0],"Web":[1,55,80,104,121,169,310],"sites":[2,81,105],"fail":[3],"in":[4,62,189,223,258,305],"the":[5,40,45,48,51,54,63,66,71,75,117,130,148,168,178,190,198,217,252,283,286],"worst":[6],"ways.":[7],"They":[8,173],"can":[9,14,24,37,193],"reveal":[10],"private":[11],"data":[12,32,156],"that":[13,43,216,247,281],"never":[15],"be":[16],"retracted":[17],"[60,":[18],"72,":[19],"78,":[20],"79].":[21],"Or":[22],"they":[23,153],"succumb":[25],"to":[26,33,84,89,100,158,195,206,213,232,251],"vandalism,":[27],"and":[28,86,91,133,144,166,181,203,228,255,290,302],"subsequently":[29],"show":[30],"corrupt":[31],"users":[34],"[27].":[35],"Blame":[36],"fall":[38],"on":[39,300],"off-the-shelf":[41],"software":[42],"runs":[44],"site":[46],"(e.g.,":[47],"operating":[49,253,292],"system,":[50,245],"application":[52,68,122,311],"libraries,":[53],"server,":[56],"etc.),":[57],"but":[58,197],"more":[59],"frequently":[60],"(as":[61],"above":[64],"references),":[65],"custom":[67,76],"code":[69,77,192,200],"is":[70,82,106,201,215],"guilty":[72],"party.":[73],"Unfortunately,":[74],"behind":[78],"many":[79],"difficult":[83],"secure":[85],"audit,":[87],"due":[88],"large":[90],"rapidly-changing":[92],"trusted":[93,191,199],"computing":[94],"bases":[95],"(TCBs).":[96],"A":[97],"promising":[98],"approach":[99,218],"reducing":[101],"TCBs":[102],"for":[103],"decentralized":[107],"information":[108],"flow":[109],"control":[110],"(DIFC)":[111],"[21,":[112],"69,":[113],"113].":[114],"DIFC":[115,244,249,269,288],"allows":[116],"split":[118],"of":[119,126,147,210],"a":[120,220,242,267,276,307],"into":[123],"two":[124],"types":[125],"components:":[127],"those":[128,134],"inside":[129],"TCB":[131],"(trusted),":[132],"without":[135],"(untrusted).":[136],"The":[137,208],"untrusted":[138],"components":[139,162],"are":[140,163,186],"large,":[141],"change":[142,176],"frequently,":[143],"do":[145],"most":[146],"computation.":[149],"Even":[150],"if":[151],"buggy,":[152],"cannot":[154],"move":[155],"contrary":[157],"security":[159,171,273],"policy.":[160],"Trusted":[161],"much":[164],"smaller,":[165],"configure":[167],"site's":[170],"policies.":[172],"need":[174],"only":[175],"when":[177,183],"policy":[179],"changes,":[180],"not":[182],"new":[184,243,277],"features":[185],"introduced.":[187],"Bugs":[188],"lead":[194],"compromise,":[196],"smaller":[202],"therefore":[204],"easier":[205],"audit.":[207],"drawback":[209],"DIFC,":[211],"up":[212],"now,":[214],"requires":[219],"major":[221],"shift":[222],"how":[224],"programmers":[225,233],"develop":[226],"applications":[227],"thus":[229],"remains":[230],"inaccessible":[231],"using":[234],"today's":[235],"proven":[236],"programming":[237,256],"abstractions.":[238],"This":[239],"thesis":[240],"proposes":[241],"Flume,":[246],"brings":[248],"controls":[250],"systems":[254,293],"languages":[257],"wide":[259],"use":[260],"today.":[261],"Its":[262],"key":[263],"contributions":[264],"are:":[265],"(1)":[266],"simplified":[268],"model":[270,289],"with":[271],"provable":[272],"guarantees;":[274],"(2)":[275],"primitive":[278],"called":[279],"endpoints":[280],"bridges":[282],"gap":[284],"between":[285],"Flume":[287],"standard":[291],"interfaces;":[294],"(3)":[295],"an":[296],"implementation":[297],"at":[298],"user-level":[299],"Linux;":[301],"(4)":[303],"success":[304],"securing":[306],"popular":[308],"preexisting":[309],"(MoinMoin":[312],"Wiki).":[313]},"counts_by_year":[{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2016-06-24T00:00:00"}