{"id":"https://openalex.org/W2135366939","doi":"https://doi.org/10.1145/1375696.1375703","title":"A security domain model to assess software for exploitable covert channels","display_name":"A security domain model to assess software for exploitable covert channels","publication_year":2008,"publication_date":"2008-06-07","ids":{"openalex":"https://openalex.org/W2135366939","doi":"https://doi.org/10.1145/1375696.1375703","mag":"2135366939"},"language":"en","primary_location":{"id":"doi:10.1145/1375696.1375703","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1375696.1375703","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the third ACM SIGPLAN workshop on Programming languages and analysis for security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5014402333","display_name":"Alan Shaffer","orcid":null},"institutions":[{"id":"https://openalex.org/I35364215","display_name":"Naval Postgraduate School","ror":"https://ror.org/033yfkj90","country_code":"US","type":"education","lineage":["https://openalex.org/I1330347796","https://openalex.org/I3130687028","https://openalex.org/I35364215"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Alan B. Shaffer","raw_affiliation_strings":["Naval Postgraduate School, Monterey, CA"],"affiliations":[{"raw_affiliation_string":"Naval Postgraduate School, Monterey, CA","institution_ids":["https://openalex.org/I35364215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006145166","display_name":"Mikhail Auguston","orcid":null},"institutions":[{"id":"https://openalex.org/I35364215","display_name":"Naval Postgraduate School","ror":"https://ror.org/033yfkj90","country_code":"US","type":"education","lineage":["https://openalex.org/I1330347796","https://openalex.org/I3130687028","https://openalex.org/I35364215"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mikhail Auguston","raw_affiliation_strings":["Naval Postgraduate School, Monterey, CA"],"affiliations":[{"raw_affiliation_string":"Naval Postgraduate School, Monterey, CA","institution_ids":["https://openalex.org/I35364215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113498499","display_name":"Cynthia E. Irvine","orcid":null},"institutions":[{"id":"https://openalex.org/I35364215","display_name":"Naval Postgraduate School","ror":"https://ror.org/033yfkj90","country_code":"US","type":"education","lineage":["https://openalex.org/I1330347796","https://openalex.org/I3130687028","https://openalex.org/I35364215"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Cynthia E. Irvine","raw_affiliation_strings":["Naval Postgraduate School, Monterey, CA"],"affiliations":[{"raw_affiliation_string":"Naval Postgraduate School, Monterey, CA","institution_ids":["https://openalex.org/I35364215"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5109234740","display_name":"Timothy E. Levin","orcid":null},"institutions":[{"id":"https://openalex.org/I35364215","display_name":"Naval Postgraduate School","ror":"https://ror.org/033yfkj90","country_code":"US","type":"education","lineage":["https://openalex.org/I1330347796","https://openalex.org/I3130687028","https://openalex.org/I35364215"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Timothy E. Levin","raw_affiliation_strings":["Naval Postgraduate School, Monterey, CA"],"affiliations":[{"raw_affiliation_string":"Naval Postgraduate School, Monterey, CA","institution_ids":["https://openalex.org/I35364215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5014402333"],"corresponding_institution_ids":["https://openalex.org/I35364215"],"apc_list":null,"apc_paid":null,"fwci":4.6831,"has_fulltext":false,"cited_by_count":19,"citation_normalized_percentile":{"value":0.94699201,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"45","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/covert-channel","display_name":"Covert channel","score":0.8919509649276733},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8093849420547485},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.5325488448143005},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5197914838790894},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.5138969421386719},{"id":"https://openalex.org/keywords/tracing","display_name":"Tracing","score":0.4919578731060028},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.462867796421051},{"id":"https://openalex.org/keywords/computer-security-model","display_name":"Computer security model","score":0.43582743406295776},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4335169792175293},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.41856205463409424},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4166529178619385},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.35246121883392334},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.17621788382530212},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.12337642908096313},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1179904043674469}],"concepts":[{"id":"https://openalex.org/C29024540","wikidata":"https://www.wikidata.org/wiki/Q1476964","display_name":"Covert channel","level":5,"score":0.8919509649276733},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8093849420547485},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.5325488448143005},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5197914838790894},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.5138969421386719},{"id":"https://openalex.org/C138673069","wikidata":"https://www.wikidata.org/wiki/Q322229","display_name":"Tracing","level":2,"score":0.4919578731060028},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.462867796421051},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.43582743406295776},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4335169792175293},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.41856205463409424},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4166529178619385},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.35246121883392334},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.17621788382530212},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.12337642908096313},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1179904043674469},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1375696.1375703","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1375696.1375703","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the third ACM SIGPLAN workshop on Programming languages and analysis for security","raw_type":"proceedings-article"},{"id":"pmh:ADA484406","is_oa":false,"landing_page_url":"http://oai.dtic.mil/oai/oai?&verb=getRecord&metadataPrefix=html&identifier=ADA484406","pdf_url":null,"source":{"id":"https://openalex.org/S4406923043","display_name":"Defense Technical Information Center (DTIC)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"DTIC","raw_type":"Text"},{"id":"pmh:oai:calhoun.nps.edu:10945/7155","is_oa":false,"landing_page_url":"http://hdl.handle.net/10945/7155","pdf_url":null,"source":{"id":"https://openalex.org/S4306400952","display_name":"Calhoun: The Naval Postgraduate School Institutional Archive (Naval Postgraduate School)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35364215","host_organization_name":"Naval Postgraduate School","host_organization_lineage":["https://openalex.org/I35364215"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.800000011920929,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306122","display_name":"Institute of Museum and Library Services","ror":"https://ror.org/030prv062"},{"id":"https://openalex.org/F4320337345","display_name":"Office of Naval Research","ror":"https://ror.org/00rk2pe57"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1491537415","https://openalex.org/W1527172800","https://openalex.org/W1551753488","https://openalex.org/W1559945648","https://openalex.org/W1573224992","https://openalex.org/W1581993637","https://openalex.org/W1824487558","https://openalex.org/W1895387792","https://openalex.org/W1969938710","https://openalex.org/W1977764760","https://openalex.org/W1994476536","https://openalex.org/W2045234005","https://openalex.org/W2048500751","https://openalex.org/W2080914957","https://openalex.org/W2081846250","https://openalex.org/W2094873755","https://openalex.org/W2098451214","https://openalex.org/W2099137371","https://openalex.org/W2100019646","https://openalex.org/W2122049982","https://openalex.org/W2126806819","https://openalex.org/W2129278597","https://openalex.org/W2133996557","https://openalex.org/W2135046885","https://openalex.org/W2142931032","https://openalex.org/W2150174204","https://openalex.org/W2151185692","https://openalex.org/W2159897734","https://openalex.org/W2165750732","https://openalex.org/W2166180744","https://openalex.org/W2168686464","https://openalex.org/W2202040224","https://openalex.org/W2996027056","https://openalex.org/W3033571618","https://openalex.org/W3141352840","https://openalex.org/W6629462130","https://openalex.org/W6997154941"],"related_works":["https://openalex.org/W2409612194","https://openalex.org/W4224042389","https://openalex.org/W1568579691","https://openalex.org/W20460883","https://openalex.org/W174282171","https://openalex.org/W1587013156","https://openalex.org/W4239080508","https://openalex.org/W2326198059","https://openalex.org/W4319780484","https://openalex.org/W165152124"],"abstract_inverted_index":{"Covert":[0],"channels":[1],"can":[2],"result":[3],"in":[4,43,112,127,153],"unauthorized":[5],"information":[6,45,83],"flows":[7],"when":[8],"exploited":[9],"by":[10],"malicious":[11],"software.":[12],"To":[13],"address":[14],"this":[15],"problem,":[16],"we":[17],"present":[18],"a":[19,98,106,113,120],"precise,":[20],"formal":[21,49],"definition":[22],"for":[23,54],"covert":[24,62,86,146],"channels,":[25],"which":[26,75,93],"relies":[27],"on":[28],"control":[29],"flow":[30,46],"dependency":[31],"tracing":[32],"through":[33],"program":[34,81],"execution,":[35],"and":[36,39,85,89,119,149],"extends":[37],"Dennings'":[38],"subsequent":[40],"classic":[41],"work":[42],"secure":[44],"[9][40][30].":[47],"A":[48],"security":[50,124,150],"Domain":[51],"Model":[52],"(DM)":[53],"conducting":[55],"static":[56,137],"analysis":[57,138],"of":[58,71,80,97,108,122,139],"programs":[59],"to":[60,135,142],"identify":[61],"channel":[63,87,147],"vulnerabilities":[64,148],"is":[65,69,103,133],"described.":[66],"The":[67,101,129],"DM":[68,102,141],"comprised":[70],"an":[72,90],"Invariant":[73],"Model,":[74,92],"defines":[76],"the":[77,95,109,123,140,154],"generic":[78],"concepts":[79],"state,":[82],"flow,":[84],"rules;":[88],"Implementation":[91,115],"specifies":[94],"behavior":[96],"target":[99,155],"program.":[100,156],"compiled":[104],"from":[105],"representation":[107],"program,":[110],"written":[111,126],"domain-specific":[114],"Modeling":[116],"Language":[117],"(IML),":[118],"specification":[121],"policy":[125,151],"Alloy.":[128],"Alloy":[130],"Analyzer":[131],"tool":[132],"used":[134],"perform":[136],"automatically":[143],"detect":[144],"potential":[145],"violations":[152]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-04-04T16:13:02.066488","created_date":"2025-10-10T00:00:00"}