{"id":"https://openalex.org/W2166510103","doi":"https://doi.org/10.1145/1294261.1294265","title":"Secure web applications via automatic partitioning","display_name":"Secure web applications via automatic partitioning","publication_year":2007,"publication_date":"2007-10-14","ids":{"openalex":"https://openalex.org/W2166510103","doi":"https://doi.org/10.1145/1294261.1294265","mag":"2166510103"},"language":"en","primary_location":{"id":"doi:10.1145/1294261.1294265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1294261.1294265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046383149","display_name":"Stephen Chong","orcid":"https://orcid.org/0000-0002-6734-5383"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen Chong","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020572630","display_name":"Jed Liu","orcid":"https://orcid.org/0000-0002-2753-5174"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jed Liu","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101697549","display_name":"Andrew C. Myers","orcid":"https://orcid.org/0000-0001-5819-7588"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew C. Myers","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101550167","display_name":"Xin Qi","orcid":"https://orcid.org/0000-0003-4572-059X"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xin Qi","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112275394","display_name":"K. Vikram","orcid":null},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"K. Vikram","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069017863","display_name":"Lantian Zheng","orcid":"https://orcid.org/0009-0007-9437-4642"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lantian Zheng","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006099637","display_name":"Xin Zheng","orcid":"https://orcid.org/0000-0001-9006-1509"},"institutions":[{"id":"https://openalex.org/I205783295","display_name":"Cornell University","ror":"https://ror.org/05bnh6r87","country_code":"US","type":"education","lineage":["https://openalex.org/I205783295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xin Zheng","raw_affiliation_strings":["Cornell University, Ithaca, NY"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cornell University, Ithaca, NY","institution_ids":["https://openalex.org/I205783295"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":7,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":39.7208,"has_fulltext":false,"cited_by_count":245,"citation_normalized_percentile":{"value":0.99825976,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"31","last_page":"44"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8874790668487549},{"id":"https://openalex.org/keywords/javascript","display_name":"JavaScript","score":0.6514773964881897},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.5150706171989441},{"id":"https://openalex.org/keywords/compiler","display_name":"Compiler","score":0.5020456314086914},{"id":"https://openalex.org/keywords/web-application","display_name":"Web application","score":0.4828934669494629},{"id":"https://openalex.org/keywords/java","display_name":"Java","score":0.47580844163894653},{"id":"https://openalex.org/keywords/remote-evaluation","display_name":"Remote evaluation","score":0.42716872692108154},{"id":"https://openalex.org/keywords/redundant-code","display_name":"Redundant code","score":0.42335349321365356},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.42083433270454407},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4161129593849182},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.40330636501312256},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.3666774332523346},{"id":"https://openalex.org/keywords/code-generation","display_name":"Code generation","score":0.2840728163719177},{"id":"https://openalex.org/keywords/client","display_name":"Client","score":0.2551890015602112}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8874790668487549},{"id":"https://openalex.org/C544833334","wikidata":"https://www.wikidata.org/wiki/Q2005","display_name":"JavaScript","level":2,"score":0.6514773964881897},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.5150706171989441},{"id":"https://openalex.org/C169590947","wikidata":"https://www.wikidata.org/wiki/Q47506","display_name":"Compiler","level":2,"score":0.5020456314086914},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.4828934669494629},{"id":"https://openalex.org/C548217200","wikidata":"https://www.wikidata.org/wiki/Q251","display_name":"Java","level":2,"score":0.47580844163894653},{"id":"https://openalex.org/C102063265","wikidata":"https://www.wikidata.org/wiki/Q1326533","display_name":"Remote evaluation","level":4,"score":0.42716872692108154},{"id":"https://openalex.org/C151578736","wikidata":"https://www.wikidata.org/wiki/Q1251793","display_name":"Redundant code","level":4,"score":0.42335349321365356},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.42083433270454407},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4161129593849182},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.40330636501312256},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3666774332523346},{"id":"https://openalex.org/C133162039","wikidata":"https://www.wikidata.org/wiki/Q1061077","display_name":"Code generation","level":3,"score":0.2840728163719177},{"id":"https://openalex.org/C27713364","wikidata":"https://www.wikidata.org/wiki/Q528166","display_name":"Client","level":3,"score":0.2551890015602112},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1294261.1294265","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1294261.1294265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of twenty-first ACM SIGOPS symposium on Operating systems principles","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.188.815","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.188.815","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cs.cornell.edu/%7Eqixin/papers/swift.pdf","raw_type":"text"},{"id":"pmh:oai:ecommons.cornell.edu:1813/5769","is_oa":false,"landing_page_url":"https://hdl.handle.net/1813/5769","pdf_url":null,"source":{"id":"https://openalex.org/S4306400757","display_name":"eCommons (Cornell University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"technical report"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.4300000071525574,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":33,"referenced_works":["https://openalex.org/W27720104","https://openalex.org/W109951691","https://openalex.org/W1480225633","https://openalex.org/W1488890761","https://openalex.org/W1511560695","https://openalex.org/W1518533182","https://openalex.org/W1582331515","https://openalex.org/W1812582761","https://openalex.org/W1983142587","https://openalex.org/W2001693166","https://openalex.org/W2043416466","https://openalex.org/W2045144252","https://openalex.org/W2060857434","https://openalex.org/W2066583243","https://openalex.org/W2075139806","https://openalex.org/W2085925880","https://openalex.org/W2102765175","https://openalex.org/W2121496786","https://openalex.org/W2126126443","https://openalex.org/W2129278597","https://openalex.org/W2136025860","https://openalex.org/W2136327713","https://openalex.org/W2148144728","https://openalex.org/W2154564703","https://openalex.org/W2158126684","https://openalex.org/W2161433768","https://openalex.org/W2294311096","https://openalex.org/W2339690115","https://openalex.org/W2611804663","https://openalex.org/W2752885492","https://openalex.org/W4247465700","https://openalex.org/W6628587945","https://openalex.org/W6680131817"],"related_works":["https://openalex.org/W2795601048","https://openalex.org/W2403324299","https://openalex.org/W2621177934","https://openalex.org/W4286287737","https://openalex.org/W1844100222","https://openalex.org/W3009852816","https://openalex.org/W2513223212","https://openalex.org/W42576273","https://openalex.org/W2255990315","https://openalex.org/W2751582792"],"abstract_inverted_index":{"Swift":[0,58],"is":[1,22,53,70,76,165],"a":[2,173],"new,":[3],"principled":[4],"approach":[5],"to":[6,35,55,101,156,167],"building":[7],"web":[8,17,93],"applications":[9],"that":[10,66,86,175],"are":[11,45,127,138],"secure":[12,54,71],"by":[13],"construction.":[14],"In":[15],"modern":[16],"applications,":[18],"some":[19],"application":[20,61,94],"functionality":[21],"usually":[23],"implemented":[24],"as":[25,78],"client-side":[26],"code":[27,32,62,75,80,108,115,124,135,169],"written":[28,77],"in":[29,110,172],"JavaScript.":[30],"Moving":[31],"and":[33,72,90,113,125,136,145,154,160,170],"data":[34,126,137,146,171],"the":[36,67,88,104,111,118,130,142,152],"client":[37,131,153],"can":[38,147],"create":[39],"security":[40,159],"vulnerabilities,":[41],"but":[42],"currently":[43],"there":[44],"no":[46],"good":[47],"methods":[48],"for":[49],"deciding":[50],"when":[51],"it":[52],"do":[56],"so.":[57],"automatically":[59,102],"partitions":[60],"while":[63],"providing":[64],"assurance":[65],"resulting":[68],"placement":[69],"efficient.":[73],"Application":[74],"Java-like":[79],"annotated":[81],"with":[82],"information":[83],"flow":[84],"policies":[85,100],"specify":[87],"confidentiality":[89],"integrity":[91],"of":[92],"information.":[95],"The":[96],"compiler":[97],"uses":[98],"these":[99],"partition":[103],"program":[105],"into":[106],"JavaScript":[107],"running":[109,116],"browser,":[112],"Java":[114],"on":[117,129,141],"server.":[119,143],"To":[120],"improve":[121],"interactive":[122],"performance,":[123],"placed":[128,140],"side.":[132],"However,":[133],"security-critical":[134],"always":[139],"Code":[144],"also":[148],"be":[149],"replicated":[150],"across":[151],"server,":[155],"obtain":[157],"both":[158],"performance.":[161],"A":[162],"max-flow":[163],"algorithm":[164],"used":[166],"place":[168],"way":[174],"minimizes":[176],"client-server":[177],"communication.":[178]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":9},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":14},{"year":2016,"cited_by_count":14},{"year":2015,"cited_by_count":9},{"year":2014,"cited_by_count":30},{"year":2013,"cited_by_count":25},{"year":2012,"cited_by_count":18}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}