{"id":"https://openalex.org/W3032434649","doi":"https://doi.org/10.1145/3387902.3392614","title":"Building a portable deeply-nested implicit information flow tracking","display_name":"Building a portable deeply-nested implicit information flow tracking","publication_year":2020,"publication_date":"2020-05-11","ids":{"openalex":"https://openalex.org/W3032434649","doi":"https://doi.org/10.1145/3387902.3392614","mag":"3032434649"},"language":"en","primary_location":{"id":"doi:10.1145/3387902.3392614","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387902.3392614","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM International Conference on Computing Frontiers","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Leandro S. de Ara\u00fajo","orcid":null},"institutions":[{"id":"https://openalex.org/I161127581","display_name":"Universidade Federal Fluminense","ror":"https://ror.org/02rjhbb08","country_code":"BR","type":"education","lineage":["https://openalex.org/I161127581"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Leandro S. de Ara\u00fajo","raw_affiliation_strings":["Universidade Federal Fluminense (UFF), Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidade Federal Fluminense (UFF), Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I161127581"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000313725","display_name":"Leandro A. J. Marzulo","orcid":"https://orcid.org/0000-0002-2429-9583"},"institutions":[{"id":"https://openalex.org/I40034438","display_name":"Universidade do Estado do Rio de Janeiro","ror":"https://ror.org/0198v2949","country_code":"BR","type":"education","lineage":["https://openalex.org/I40034438"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Leandro A. J. Marzulo","raw_affiliation_strings":["Universidade do Estado do Rio de Janeiro (UERJ), Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidade do Estado do Rio de Janeiro (UERJ), Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I40034438"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109799958","display_name":"Tiago A. O. Alves","orcid":null},"institutions":[{"id":"https://openalex.org/I40034438","display_name":"Universidade do Estado do Rio de Janeiro","ror":"https://ror.org/0198v2949","country_code":"BR","type":"education","lineage":["https://openalex.org/I40034438"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Tiago A. O. Alves","raw_affiliation_strings":["Universidade do Estado do Rio de Janeiro (UERJ), Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidade do Estado do Rio de Janeiro (UERJ), Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I40034438"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033447808","display_name":"Felipe M. G. Fran\u00e7a","orcid":"https://orcid.org/0000-0002-8980-6208"},"institutions":[{"id":"https://openalex.org/I122140584","display_name":"Universidade Federal do Rio de Janeiro","ror":"https://ror.org/03490as77","country_code":"BR","type":"education","lineage":["https://openalex.org/I122140584"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Felipe M. G. Fran\u00e7a","raw_affiliation_strings":["Universidade Federal do Rio de Janeiro (UFRJ), Rio de Janeiro, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidade Federal do Rio de Janeiro (UFRJ), Rio de Janeiro, Brazil","institution_ids":["https://openalex.org/I122140584"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055210733","display_name":"Israel Koren","orcid":"https://orcid.org/0000-0003-2741-7108"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Israel Koren","raw_affiliation_strings":["University of Massachusetts Amherst"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5054064879","display_name":"Sandip Kundu","orcid":"https://orcid.org/0000-0001-8221-3824"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sandip Kundu","raw_affiliation_strings":["University of Massachusetts Amherst"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts Amherst","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.05158832,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"150","last_page":"157"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.858288049697876},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.7971000671386719},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6481601595878601},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.6295630931854248},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.607925295829773},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.5848261117935181},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.5128557682037354},{"id":"https://openalex.org/keywords/flow","display_name":"Flow (mathematics)","score":0.4721265733242035},{"id":"https://openalex.org/keywords/tracking","display_name":"Tracking (education)","score":0.45512956380844116},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32180604338645935},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2791264057159424},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1827039122581482},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.15910151600837708},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.0968698263168335}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.858288049697876},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.7971000671386719},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6481601595878601},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.6295630931854248},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.607925295829773},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.5848261117935181},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.5128557682037354},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.4721265733242035},{"id":"https://openalex.org/C2775936607","wikidata":"https://www.wikidata.org/wiki/Q466845","display_name":"Tracking (education)","level":2,"score":0.45512956380844116},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32180604338645935},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2791264057159424},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1827039122581482},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.15910151600837708},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0968698263168335},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C19417346","wikidata":"https://www.wikidata.org/wiki/Q7922","display_name":"Pedagogy","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3387902.3392614","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3387902.3392614","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 17th ACM International Conference on Computing Frontiers","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1515790419","https://openalex.org/W1969275903","https://openalex.org/W1984435105","https://openalex.org/W2040867586","https://openalex.org/W2089745089","https://openalex.org/W2100666033","https://openalex.org/W2108747667","https://openalex.org/W2115996698","https://openalex.org/W2128769765","https://openalex.org/W2129482816","https://openalex.org/W2144789413","https://openalex.org/W2151135920","https://openalex.org/W2153543246","https://openalex.org/W2159433799","https://openalex.org/W2535350740","https://openalex.org/W4232751114","https://openalex.org/W4239813889"],"related_works":["https://openalex.org/W2188516702","https://openalex.org/W4200282997","https://openalex.org/W2135891363","https://openalex.org/W1575986870","https://openalex.org/W2104376916","https://openalex.org/W3102965473","https://openalex.org/W2032731920","https://openalex.org/W2905519875","https://openalex.org/W2620179576","https://openalex.org/W4383721685"],"abstract_inverted_index":{"Dynamic":[0],"Information":[1],"Flow":[2],"Tracking":[3],"has":[4],"been":[5],"successfully":[6],"used":[7],"to":[8,19,53,77,98],"prevent":[9],"a":[10,67,81,112],"wide":[11],"range":[12],"of":[13,105,128],"attacks":[14,42],"and":[15,141],"detect":[16],"illegal":[17],"access":[18],"sensitive":[20],"information.":[21],"Most":[22],"proposed":[23],"solutions":[24],"only":[25,124],"track":[26],"the":[27,32,51,55,59,132,151],"explicit":[28,75],"information":[29],"flow":[30,49,70],"where":[31],"taint":[33,87,100,114],"is":[34],"propagated":[35],"through":[36],"data":[37,56,117],"dependencies.":[38],"However,":[39],"recent":[40],"evasion":[41],"exploit":[43],"implicit":[44,69,139],"flows,":[45],"that":[46,73,122],"use":[47],"control":[48,82],"in":[50,103,119],"application,":[52],"manipulate":[54],"thus":[57],"making":[58],"malicious":[60],"activity":[61],"undetectable.":[62],"We":[63],"propose":[64,111],"NIFT":[65],"-":[66],"nested":[68],"tracking":[71],"mechanism":[72],"extends":[74],"propagation":[76,115],"instructions":[78,88,126,130],"affected":[79],"by":[80,95],"dependency.":[83],"Our":[84,135],"technique":[85,136],"generates":[86],"at":[89],"compile":[90],"time":[91],"which":[92],"are":[93],"executed":[94,118],"specialized":[96],"hardware":[97],"propagate":[99],"implicitly":[101],"even":[102],"cases":[104],"deeply-nested":[106],"branches.":[107],"In":[108],"addition,":[109],"we":[110],"restricted":[113],"for":[116],"conditional":[120],"branches":[121],"affects":[123],"immediate":[125],"instead":[127],"all":[129],"inside":[131],"branch":[133],"scope.":[134],"efficiently":[137],"locates":[138],"flows":[140],"resolves":[142],"them":[143],"with":[144],"negligible":[145],"performance":[146],"overhead.":[147],"Moreover,":[148],"it":[149],"mitigates":[150],"over-tainting":[152],"problem.":[153]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}