{"id":"https://openalex.org/W2415236938","doi":"https://doi.org/10.1145/2908080.2908100","title":"End-to-end verification of information-flow security for C and assembly programs","display_name":"End-to-end verification of information-flow security for C and assembly programs","publication_year":2016,"publication_date":"2016-06-02","ids":{"openalex":"https://openalex.org/W2415236938","doi":"https://doi.org/10.1145/2908080.2908100","mag":"2415236938"},"language":"en","primary_location":{"id":"doi:10.1145/2908080.2908100","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2908080.2908100","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2908080.2908100","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 37th ACM SIGPLAN Conference on Programming Language Design and Implementation","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/2908080.2908100","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5046654886","display_name":"David Costanzo","orcid":null},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Costanzo","raw_affiliation_strings":["Yale University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, USA","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070627140","display_name":"Zhong Shao","orcid":"https://orcid.org/0000-0001-8184-7649"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Zhong Shao","raw_affiliation_strings":["Yale University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, USA","institution_ids":["https://openalex.org/I32971472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000031216","display_name":"Ronghui Gu","orcid":"https://orcid.org/0000-0002-6812-6182"},"institutions":[{"id":"https://openalex.org/I32971472","display_name":"Yale University","ror":"https://ror.org/03v76x132","country_code":"US","type":"education","lineage":["https://openalex.org/I32971472"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ronghui Gu","raw_affiliation_strings":["Yale University, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Yale University, USA","institution_ids":["https://openalex.org/I32971472"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I32971472"],"apc_list":null,"apc_paid":null,"fwci":5.2399,"has_fulltext":true,"cited_by_count":52,"citation_normalized_percentile":{"value":0.96878786,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"648","last_page":"664"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10478","display_name":"Diamond and Carbon-based Materials Research","score":0.9839000105857849,"subfield":{"id":"https://openalex.org/subfields/2505","display_name":"Materials Chemistry"},"field":{"id":"https://openalex.org/fields/25","display_name":"Materials Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9797999858856201,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8344643115997314},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.6689921617507935},{"id":"https://openalex.org/keywords/soundness","display_name":"Soundness","score":0.6318560838699341},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.5870169997215271},{"id":"https://openalex.org/keywords/abstraction","display_name":"Abstraction","score":0.5355939865112305},{"id":"https://openalex.org/keywords/state","display_name":"State (computer science)","score":0.4998445510864258},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.47700169682502747},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.440717488527298},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4398253560066223},{"id":"https://openalex.org/keywords/assembly-language","display_name":"Assembly language","score":0.4302988350391388},{"id":"https://openalex.org/keywords/formal-verification","display_name":"Formal verification","score":0.42035001516342163},{"id":"https://openalex.org/keywords/abstract-machine","display_name":"Abstract machine","score":0.4123288691043854},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.40084099769592285}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8344643115997314},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.6689921617507935},{"id":"https://openalex.org/C39920170","wikidata":"https://www.wikidata.org/wiki/Q693083","display_name":"Soundness","level":2,"score":0.6318560838699341},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.5870169997215271},{"id":"https://openalex.org/C124304363","wikidata":"https://www.wikidata.org/wiki/Q673661","display_name":"Abstraction","level":2,"score":0.5355939865112305},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.4998445510864258},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.47700169682502747},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.440717488527298},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4398253560066223},{"id":"https://openalex.org/C50831359","wikidata":"https://www.wikidata.org/wiki/Q165436","display_name":"Assembly language","level":3,"score":0.4302988350391388},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.42035001516342163},{"id":"https://openalex.org/C88977235","wikidata":"https://www.wikidata.org/wiki/Q787114","display_name":"Abstract machine","level":2,"score":0.4123288691043854},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.40084099769592285},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2908080.2908100","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2908080.2908100","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2908080.2908100","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 37th ACM SIGPLAN Conference on Programming Language Design and Implementation","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/2908080.2908100","is_oa":true,"landing_page_url":"https://doi.org/10.1145/2908080.2908100","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/2908080.2908100","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 37th ACM SIGPLAN Conference on Programming Language Design and Implementation","raw_type":"proceedings-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6899999976158142,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G1013867104","display_name":null,"funder_award_id":"1065451, 1319671, 1521523","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G1889560887","display_name":null,"funder_award_id":"12-2-0293","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4577670171","display_name":null,"funder_award_id":"FA8750-15-C-0082","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G4713059963","display_name":null,"funder_award_id":"FA8750","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G5626127761","display_name":null,"funder_award_id":"FA8750-10-2-0254, FA8750-12-2-0293, FA8750-15-C-0082","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G6080364906","display_name":"Collaborative Research:  Expeditions in Computing:  The Science of Deep Specification","funder_award_id":"1521523","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7515674563","display_name":null,"funder_award_id":"FA8750-10-2-0254, FA8750-12-2-0293","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G774169317","display_name":"SHF: Small: VeriQ: Formal Quantitative Software Verification in Realistic Application Scenarios","funder_award_id":"1319671","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G789317362","display_name":null,"funder_award_id":"FA8750-12-2-0293","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"},{"id":"https://openalex.org/G8542633891","display_name":null,"funder_award_id":"FA8750-10-2-0254","funder_id":"https://openalex.org/F4320332180","funder_display_name":"Defense Advanced Research Projects Agency"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320308380","display_name":"Yale University","ror":"https://ror.org/03v76x132"},{"id":"https://openalex.org/F4320332180","display_name":"Defense Advanced Research Projects Agency","ror":"https://ror.org/02caytj08"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2415236938.pdf","grobid_xml":"https://content.openalex.org/works/W2415236938.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W51058944","https://openalex.org/W92627029","https://openalex.org/W140235344","https://openalex.org/W1434079718","https://openalex.org/W1521474031","https://openalex.org/W1800631871","https://openalex.org/W1819958245","https://openalex.org/W1975091280","https://openalex.org/W1977764760","https://openalex.org/W1988079752","https://openalex.org/W2019193016","https://openalex.org/W2070005378","https://openalex.org/W2077539801","https://openalex.org/W2080914957","https://openalex.org/W2084175640","https://openalex.org/W2095770127","https://openalex.org/W2110904621","https://openalex.org/W2122049982","https://openalex.org/W2128932642","https://openalex.org/W2130427425","https://openalex.org/W2136296832","https://openalex.org/W2148662736","https://openalex.org/W2163347957","https://openalex.org/W3106373601","https://openalex.org/W6638560250"],"related_works":["https://openalex.org/W1511249877","https://openalex.org/W1578828174","https://openalex.org/W2950376466","https://openalex.org/W2000943029","https://openalex.org/W1971954812","https://openalex.org/W2998594779","https://openalex.org/W1519156167","https://openalex.org/W2130105106","https://openalex.org/W3022085614","https://openalex.org/W1937823099"],"abstract_inverted_index":{"Protecting":[0],"the":[1,13,33,37,58,68,120,168,185,207,223],"confidentiality":[2],"of":[3,12,36,52,71,98,104,115,122,141,157,170,189,206,222,226],"information":[4],"manipulated":[5],"by":[6],"a":[7,90,99,112,154,190],"computing":[8,38],"system":[9,39,48,101,193],"is":[10,28,160],"one":[11],"most":[14],"important":[15],"challenges":[16],"facing":[17],"today's":[18,47],"cybersecurity":[19],"community.":[20],"A":[21],"promising":[22],"step":[23],"toward":[24],"conquering":[25],"this":[26,86],"challenge":[27],"to":[29,133,145,162],"formally":[30,94],"verify":[31,220],"that":[32,63,102,118,159],"end-to-end":[34,59,96,179],"behavior":[35],"really":[40],"satisfies":[41],"various":[42],"information-flow":[43],"policies.":[44],"Unfortunately,":[45],"because":[46],"software":[49,100],"still":[50],"consists":[51,103],"both":[53,105],"C":[54,106,212],"and":[55,82,107,127,143,213],"assembly":[56,108,201],"programs,":[57],"verification":[60],"necessarily":[61],"requires":[62],"we":[64,88,174,219],"not":[65],"only":[66],"prove":[67],"security":[69,97,148,180],"properties":[70,79],"individual":[72],"components,":[73],"but":[74],"also":[75],"carefully":[76],"preserve":[77,163],"these":[78],"through":[80],"compilation":[81],"cross-language":[83],"linking.":[84],"In":[85],"paper,":[87],"present":[89],"novel":[91],"methodology":[92],"for":[93,138],"verifying":[95],"programs.":[109],"We":[110,130],"introduce":[111],"general":[113],"definition":[114],"observation":[116,136],"function":[117],"unifies":[119],"concepts":[121],"policy":[123],"specification,":[124],"state":[125,164],"indistinguishability,":[126],"whole-execution":[128],"behaviors.":[129],"show":[131],"how":[132,144],"use":[134],"different":[135,139,147],"functions":[137],"levels":[140,152],"abstraction,":[142],"link":[146],"proofs":[149],"across":[150],"abstraction":[151],"using":[153],"special":[155],"kind":[156],"simulation":[158],"guaranteed":[161],"indistinguishability.":[165],"To":[166],"demonstrate":[167],"effectiveness":[169],"our":[171],"new":[172],"methodology,":[173],"have":[175],"successfully":[176],"constructed":[177],"an":[178,197],"proof,":[181],"fully":[182],"formalized":[183],"in":[184,211,217],"Coq":[186],"proof":[187],"assistant,":[188],"nontrivial":[191],"operating":[192],"kernel":[194,208],"(running":[195],"on":[196],"extended":[198],"CompCert":[199],"x86":[200],"machine":[202],"model).":[203],"Some":[204],"parts":[205],"are":[209,215],"written":[210,216],"some":[214],"assembly;":[218],"all":[221],"code,":[224],"regardless":[225],"language.":[227]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":13},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":2}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}