{"id":"https://openalex.org/W4387857700","doi":"https://doi.org/10.56553/popets-2024-0034","title":"User-Controlled Privacy: Taint, Track, and Control","display_name":"User-Controlled Privacy: Taint, Track, and Control","publication_year":2023,"publication_date":"2023-10-22","ids":{"openalex":"https://openalex.org/W4387857700","doi":"https://doi.org/10.56553/popets-2024-0034"},"language":"en","primary_location":{"id":"doi:10.56553/popets-2024-0034","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0034","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0034.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://petsymposium.org/popets/2024/popets-2024-0034.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5061322917","display_name":"Fran\u00e7ois Hublet","orcid":"https://orcid.org/0000-0001-5419-3125"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Fran\u00e7ois Hublet","raw_affiliation_strings":["ETH Z\u00fcrich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Z\u00fcrich","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025344654","display_name":"David Basin","orcid":"https://orcid.org/0000-0003-2952-939X"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"David Basin","raw_affiliation_strings":["ETH Z\u00fcrich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Z\u00fcrich","institution_ids":["https://openalex.org/I35440088"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028440299","display_name":"Sr\u0111an Krsti\u0107","orcid":"https://orcid.org/0000-0001-8314-2589"},"institutions":[{"id":"https://openalex.org/I35440088","display_name":"ETH Zurich","ror":"https://ror.org/05a28rw58","country_code":"CH","type":"education","lineage":["https://openalex.org/I2799323385","https://openalex.org/I35440088"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Sr\u0111an Krsti\u0107","raw_affiliation_strings":["ETH Z\u00fcrich"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ETH Z\u00fcrich","institution_ids":["https://openalex.org/I35440088"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I35440088"],"apc_list":null,"apc_paid":null,"fwci":1.269,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.83306233,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"2024","issue":"1","first_page":"597","last_page":"616"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9922999739646912,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9865000247955322,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8838441967964172},{"id":"https://openalex.org/keywords/programmer","display_name":"Programmer","score":0.7867510318756104},{"id":"https://openalex.org/keywords/hol","display_name":"HOL","score":0.7765980958938599},{"id":"https://openalex.org/keywords/taint-checking","display_name":"Taint checking","score":0.7392652630805969},{"id":"https://openalex.org/keywords/mathematical-proof","display_name":"Mathematical proof","score":0.5563699007034302},{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.5094106793403625},{"id":"https://openalex.org/keywords/track","display_name":"Track (disk drive)","score":0.49547016620635986},{"id":"https://openalex.org/keywords/information-flow","display_name":"Information flow","score":0.4872080683708191},{"id":"https://openalex.org/keywords/privacy-policy","display_name":"Privacy policy","score":0.4761795401573181},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.46862107515335083},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.4591803252696991},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.45587605237960815},{"id":"https://openalex.org/keywords/security-policy","display_name":"Security policy","score":0.4532601833343506},{"id":"https://openalex.org/keywords/control-flow","display_name":"Control flow","score":0.4333900511264801},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4321596026420593},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.4136631190776825},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.372172474861145},{"id":"https://openalex.org/keywords/information-privacy","display_name":"Information privacy","score":0.2969227731227875},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.17725792527198792},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.15635201334953308},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.08487197756767273}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8838441967964172},{"id":"https://openalex.org/C2778514511","wikidata":"https://www.wikidata.org/wiki/Q1374194","display_name":"Programmer","level":2,"score":0.7867510318756104},{"id":"https://openalex.org/C17435882","wikidata":"https://www.wikidata.org/wiki/Q17030435","display_name":"HOL","level":2,"score":0.7765980958938599},{"id":"https://openalex.org/C63116202","wikidata":"https://www.wikidata.org/wiki/Q7676227","display_name":"Taint checking","level":3,"score":0.7392652630805969},{"id":"https://openalex.org/C108710211","wikidata":"https://www.wikidata.org/wiki/Q11538","display_name":"Mathematical proof","level":2,"score":0.5563699007034302},{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.5094106793403625},{"id":"https://openalex.org/C89992363","wikidata":"https://www.wikidata.org/wiki/Q5961558","display_name":"Track (disk drive)","level":2,"score":0.49547016620635986},{"id":"https://openalex.org/C2779136372","wikidata":"https://www.wikidata.org/wiki/Q10283002","display_name":"Information flow","level":2,"score":0.4872080683708191},{"id":"https://openalex.org/C102938260","wikidata":"https://www.wikidata.org/wiki/Q1999831","display_name":"Privacy policy","level":3,"score":0.4761795401573181},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.46862107515335083},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.4591803252696991},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.45587605237960815},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.4532601833343506},{"id":"https://openalex.org/C160191386","wikidata":"https://www.wikidata.org/wiki/Q868299","display_name":"Control flow","level":2,"score":0.4333900511264801},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4321596026420593},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4136631190776825},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.372172474861145},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.2969227731227875},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.17725792527198792},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.15635201334953308},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.08487197756767273},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.56553/popets-2024-0034","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0034","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0034.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},{"id":"pmh:oai:www.research-collection.ethz.ch:20.500.11850/641987","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11850/641987","pdf_url":null,"source":{"id":"https://openalex.org/S4306402302","display_name":"Repository for Publications and Research Data (ETH Zurich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I35440088","host_organization_name":"ETH Zurich","host_organization_lineage":["https://openalex.org/I35440088"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings on Privacy Enhancing Technologies, 2024 (1)","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.3929/ethz-b-000641987","is_oa":true,"landing_page_url":"https://doi.org/10.3929/ethz-b-000641987","pdf_url":null,"source":{"id":"https://openalex.org/S7407051236","display_name":"ETH Z\u00fcrich Research Collection","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"doi:10.56553/popets-2024-0034","is_oa":true,"landing_page_url":"https://doi.org/10.56553/popets-2024-0034","pdf_url":"https://petsymposium.org/popets/2024/popets-2024-0034.pdf","source":{"id":"https://openalex.org/S4210183172","display_name":"Proceedings on Privacy Enhancing Technologies","issn_l":"2299-0984","issn":["2299-0984"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320322","host_organization_name":"De Gruyter Open","host_organization_lineage":["https://openalex.org/P4310320322","https://openalex.org/P4310313990"],"host_organization_lineage_names":["De Gruyter Open","De Gruyter"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings on Privacy Enhancing Technologies","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6800000071525574,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5725153931","display_name":"Model-driven Security & Privacy","funder_award_id":"204796","funder_id":"https://openalex.org/F4320320924","funder_display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320320924","display_name":"Schweizerischer Nationalfonds zur F\u00f6rderung der Wissenschaftlichen Forschung","ror":"https://ror.org/00yjd3n13"}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4387857700.pdf"},"referenced_works_count":73,"referenced_works":["https://openalex.org/W91193428","https://openalex.org/W114581357","https://openalex.org/W1488890761","https://openalex.org/W1587950788","https://openalex.org/W1588115268","https://openalex.org/W1597778235","https://openalex.org/W1639975619","https://openalex.org/W1725973462","https://openalex.org/W1866799138","https://openalex.org/W1977764760","https://openalex.org/W1978129870","https://openalex.org/W1984936841","https://openalex.org/W1989051781","https://openalex.org/W2005421574","https://openalex.org/W2008332764","https://openalex.org/W2024811322","https://openalex.org/W2025315843","https://openalex.org/W2031533839","https://openalex.org/W2036910349","https://openalex.org/W2066195326","https://openalex.org/W2078922545","https://openalex.org/W2094873755","https://openalex.org/W2129278597","https://openalex.org/W2145653610","https://openalex.org/W2146717998","https://openalex.org/W2158126684","https://openalex.org/W2202148857","https://openalex.org/W2223370306","https://openalex.org/W2267240189","https://openalex.org/W2294395356","https://openalex.org/W2296887322","https://openalex.org/W2517913729","https://openalex.org/W2523320959","https://openalex.org/W2546125727","https://openalex.org/W2611687401","https://openalex.org/W2625599531","https://openalex.org/W2784117075","https://openalex.org/W2801746908","https://openalex.org/W2885332205","https://openalex.org/W2886153332","https://openalex.org/W2889124323","https://openalex.org/W2891060526","https://openalex.org/W2900152012","https://openalex.org/W2902581740","https://openalex.org/W2911978475","https://openalex.org/W2915383908","https://openalex.org/W2949068083","https://openalex.org/W2964335063","https://openalex.org/W2969614198","https://openalex.org/W2972497427","https://openalex.org/W2972736528","https://openalex.org/W2978242032","https://openalex.org/W2978390175","https://openalex.org/W3008189384","https://openalex.org/W3011513195","https://openalex.org/W3012768098","https://openalex.org/W3048588597","https://openalex.org/W3100118001","https://openalex.org/W3100637409","https://openalex.org/W3101075274","https://openalex.org/W3125174003","https://openalex.org/W3173259073","https://openalex.org/W3206405735","https://openalex.org/W3211363117","https://openalex.org/W3212753401","https://openalex.org/W4200186003","https://openalex.org/W4205962651","https://openalex.org/W4238033972","https://openalex.org/W4243963980","https://openalex.org/W4250728693","https://openalex.org/W4286447266","https://openalex.org/W4296927657","https://openalex.org/W4387857700"],"related_works":["https://openalex.org/W1500133066","https://openalex.org/W2585743557","https://openalex.org/W4226258670","https://openalex.org/W2912319261","https://openalex.org/W2785297793","https://openalex.org/W4313443234","https://openalex.org/W2015960018","https://openalex.org/W2121579803","https://openalex.org/W2966514766","https://openalex.org/W2951091523"],"abstract_inverted_index":{"We":[0,68,84],"develop":[1],"the":[2,61,80],"first":[3],"language-based,":[4],"Privacy":[5],"by":[6],"Design":[7],"approach":[8,88,109],"that":[9],"provides":[10],"support":[11,27],"for":[12,105],"a":[13,90],"rich":[14],"class":[15],"of":[16,63,74],"privacy":[17,113],"policies.":[18],"The":[19],"policies":[20,59,114],"are":[21],"user-defined,":[22],"rather":[23],"than":[24],"programmer-defined,":[25],"and":[26,36,46,53,66,72,94],"fine-grained":[28],"information":[29],"flow":[30],"restrictions":[31],"(considering":[32],"individual":[33],"application":[34],"inputs":[35],"outputs)":[37],"with":[38,115],"temporal":[39],"constraints.":[40],"Our":[41],"approach,":[42],"called":[43],"Taint,":[44],"Track,":[45],"Control":[47],"(TTC),":[48],"combines":[49],"dynamic":[50],"information-flow":[51],"control":[52],"runtime":[54,117],"verification":[55],"to":[56],"enforce":[57],"these":[58],"in":[60,79,89],"presence":[62],"malicious":[64],"users":[65],"developers.":[67],"provide":[69],"TTC's":[70],"semantics":[71],"proofs":[73],"its":[75],"correct":[76],"enforcement,":[77],"formalized":[78],"Isabelle/HOL":[81],"proof":[82],"assistant.":[83],"also":[85],"implement":[86],"our":[87,108],"web":[91],"development":[92],"framework":[93,104],"port":[95],"three":[96],"baseline":[97],"applications":[98],"from":[99],"previous":[100],"work":[101],"into":[102],"this":[103],"evaluation.":[106],"Overall,":[107],"enforces":[110],"expressive":[111],"user-defined":[112],"practical":[116],"performance.":[118]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}