{"id":"https://openalex.org/W7126193509","doi":"https://doi.org/10.1109/raid67961.2025.00036","title":"TypeFlexer: Type Directed Flexible Program Partitioning","display_name":"TypeFlexer: Type Directed Flexible Program Partitioning","publication_year":2025,"publication_date":"2025-10-19","ids":{"openalex":"https://openalex.org/W7126193509","doi":"https://doi.org/10.1109/raid67961.2025.00036"},"language":null,"primary_location":{"id":"doi:10.1109/raid67961.2025.00036","is_oa":false,"landing_page_url":"https://doi.org/10.1109/raid67961.2025.00036","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5070808432","display_name":"Arunkumar Bhattar","orcid":null},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Arunkumar Bhattar","raw_affiliation_strings":["Purdue University"],"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5124447862","display_name":"Liyi Li","orcid":null},"institutions":[{"id":"https://openalex.org/I173911158","display_name":"Iowa State University","ror":"https://ror.org/04rswrd78","country_code":"US","type":"education","lineage":["https://openalex.org/I173911158"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Liyi Li","raw_affiliation_strings":["Iowa State University"],"affiliations":[{"raw_affiliation_string":"Iowa State University","institution_ids":["https://openalex.org/I173911158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050435493","display_name":"Mingwei Zhu","orcid":"https://orcid.org/0000-0002-7376-6993"},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingwei Zhu","raw_affiliation_strings":["University of Maryland,College Park"],"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110814317","display_name":"Le Chang","orcid":null},"institutions":[{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Le Chang","raw_affiliation_strings":["University of Maryland,College Park"],"affiliations":[{"raw_affiliation_string":"University of Maryland,College Park","institution_ids":["https://openalex.org/I66946132"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5071486684","display_name":"Aravind Machiry","orcid":"https://orcid.org/0000-0001-5124-6818"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Aravind Machiry","raw_affiliation_strings":["Purdue University"],"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5070808432"],"corresponding_institution_ids":["https://openalex.org/I219193219"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.84155407,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"138","last_page":"157"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7728000283241272,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.7728000283241272,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.08410000056028366,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.02979999966919422,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/flexibility","display_name":"Flexibility (engineering)","score":0.7027000188827515},{"id":"https://openalex.org/keywords/isolation","display_name":"Isolation (microbiology)","score":0.630299985408783},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5716000199317932},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.5713000297546387},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4560999870300293},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.44179999828338623},{"id":"https://openalex.org/keywords/annotation","display_name":"Annotation","score":0.41940000653266907},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.367900013923645}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7815999984741211},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.7027000188827515},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.630299985408783},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5716000199317932},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.5713000297546387},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4560999870300293},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.44179999828338623},{"id":"https://openalex.org/C2776321320","wikidata":"https://www.wikidata.org/wiki/Q857525","display_name":"Annotation","level":2,"score":0.41940000653266907},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.367900013923645},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3395000100135803},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.33799999952316284},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.320499986410141},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.3075000047683716},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.2971000075340271},{"id":"https://openalex.org/C98183937","wikidata":"https://www.wikidata.org/wiki/Q2112188","display_name":"Program analysis","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.28220000863075256},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C2778717966","wikidata":"https://www.wikidata.org/wiki/Q4189076","display_name":"Protection mechanism","level":3,"score":0.2799000144004822},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.273499995470047},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.273499995470047},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.26739999651908875},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.258899986743927},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.2583000063896179},{"id":"https://openalex.org/C2777299769","wikidata":"https://www.wikidata.org/wiki/Q3707858","display_name":"Type (biology)","level":2,"score":0.2547000050544739}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/raid67961.2025.00036","is_oa":false,"landing_page_url":"https://doi.org/10.1109/raid67961.2025.00036","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 28th International Symposium on Research in Attacks, Intrusions and Defenses (RAID)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":29,"referenced_works":["https://openalex.org/W2035150033","https://openalex.org/W2050252966","https://openalex.org/W2061529694","https://openalex.org/W2079029390","https://openalex.org/W2084175640","https://openalex.org/W2098806455","https://openalex.org/W2123900782","https://openalex.org/W2128274900","https://openalex.org/W2155851497","https://openalex.org/W2301548261","https://openalex.org/W2512784977","https://openalex.org/W2597705742","https://openalex.org/W2612380866","https://openalex.org/W2765797110","https://openalex.org/W2766188225","https://openalex.org/W2889788853","https://openalex.org/W2963764936","https://openalex.org/W2963934162","https://openalex.org/W3033992392","https://openalex.org/W3094003780","https://openalex.org/W3156527753","https://openalex.org/W3167569033","https://openalex.org/W3208005267","https://openalex.org/W4225163209","https://openalex.org/W4225673889","https://openalex.org/W4226087707","https://openalex.org/W4226543528","https://openalex.org/W4232865065","https://openalex.org/W4312861873"],"related_works":[],"abstract_inverted_index":{"Program":[0],"partitioning":[1,168],"is":[2,22],"a":[3,59],"proven":[4],"technique":[5],"for":[6,25],"isolating":[7],"potentially":[8],"vulnerable":[9],"code":[10],"from":[11],"trusted":[12],"program":[13,167],"components.":[14],"We":[15,50,123],"argue":[16],"that":[17,72,77,97,147],"an":[18,93],"extreme":[19],"isolation":[20,42,134],"mechanism":[21,43],"not":[23,81,98],"needed":[24],"all":[26],"use":[27],"cases.":[28],"However,":[29],"existing":[30,165],"approaches":[31],"tightly":[32],"couple":[33],"the":[34,41,125,158],"security":[35,139],"policy":[36],"(what":[37],"to":[38,45,69,104,117,157],"partition)":[39,46],"with":[40,83,137,152],"(how":[44],"making":[47],"them":[48],"inflexible.":[49],"propose":[51],"TypeFlexer,":[52],"which":[53],"cleanly":[54],"separates":[55],"these":[56],"concerns":[57],"through":[58],"type-directed":[60],"design.":[61],"Our":[62,144],"novel":[63],"type":[64,106],"system":[65],"uses":[66],"tainted":[67,78],"annotations":[68],"mark":[70],"entities":[71],"must":[73],"be":[74],"isolated,":[75],"ensuring":[76],"components":[79],"do":[80],"interfere":[82],"untainted":[84],"ones.":[85],"To":[86],"facilitate":[87],"this":[88],"process,":[89],"we":[90],"introduce":[91],"Typematic,":[92],"automated":[94],"annotation":[95],"tool":[96],"only":[99],"propagates":[100],"taint":[101,112],"information":[102],"according":[103],"our":[105,128],"rules":[107],"but":[108],"also":[109],"identifies":[110],"critical":[111],"explosion":[113],"points,":[114],"allowing":[115],"developers":[116],"apply":[118],"explicit":[119],"sanitizations":[120],"where":[121],"needed.":[122],"demonstrate":[124],"flexibility":[126],"of":[127],"approach":[129],"by":[130],"designing":[131],"three":[132],"distinct":[133],"mechanisms,":[135],"each":[136],"unique":[138],"guarantees":[140],"and":[141],"performance":[142,161],"trade-offs.":[143],"evaluation":[145],"shows":[146],"TypeFlexer":[148],"effectively":[149],"contains":[150],"vulnerabilities":[151],"negligible":[153],"overhead":[154],"as":[155],"compared":[156],"$12.8":[159],"\\%$":[160],"penalty":[162],"seen":[163],"in":[164],"state-of-the-art":[166],"techniques.":[169]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2026-02-01T00:00:00"}
