{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,12]],"date-time":"2025-09-12T18:03:05Z","timestamp":1757700185165,"version":"3.37.3"},"publisher-location":"Cham","reference-count":38,"publisher":"Springer International Publishing","isbn-type":[{"type":"print","value":"9783030036379"},{"type":"electronic","value":"9783030036386"}],"license":[{"start":{"date-parts":[[2018,1,1]],"date-time":"2018-01-01T00:00:00Z","timestamp":1514764800000},"content-version":"tdm","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2018]]},"DOI":"10.1007\/978-3-030-03638-6_2","type":"book-chapter","created":{"date-parts":[[2018,11,1]],"date-time":"2018-11-01T03:12:53Z","timestamp":1541041973000},"page":"19-37","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":8,"title":["Tracking Information Flow via Delayed Output"],"prefix":"10.1007","author":[{"given":"Iulia","family":"Bastys","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Frank","family":"Piessens","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andrei","family":"Sabelfeld","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2018,11,2]]},"reference":[{"key":"2_CR1","doi-asserted-by":"crossref","unstructured":"Bastys, I., Balliu, M., Sabelfeld, A.: If this then what? Controlling flows in IoT apps. In: ACM CCS (2018)","DOI":"10.1145\/3243734.3243841"},{"key":"2_CR2","unstructured":"Bastys, I., Piessens, F., Sabelfeld, A.: Tracking Information Flow via Delayed Output: Addressing Privacy in IoT and Emailing Apps. Full version at http:\/\/www.cse.chalmers.se\/research\/group\/security\/nordsec18"},{"key":"2_CR3","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"159","DOI":"10.1007\/978-3-642-54792-8_9","volume-title":"Principles of Security and Trust","author":"A Bichhawat","year":"2014","unstructured":"Bichhawat, A., Rajani, V., Garg, D., Hammer, C.: Information flow control in WebKit\u2019s JavaScript bytecode. In: Abadi, M., Kremer, S. (eds.) POST 2014. LNCS, vol. 8414, pp. 159\u2013178. Springer, Heidelberg (2014). https:\/\/doi.org\/10.1007\/978-3-642-54792-8_9"},{"key":"2_CR4","doi-asserted-by":"crossref","unstructured":"Bielova, N., Devriese, D., Massacci, F., Piessens, F.: Reactive non-interference for the browser: extended version. Technical report, KULeuven, 2011. Report CW 602 (2011)","DOI":"10.1109\/ICNSS.2011.6059965"},{"key":"2_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"48","DOI":"10.1007\/978-3-642-17714-9_5","volume-title":"Information Systems Security","author":"A Birgisson","year":"2010","unstructured":"Birgisson, A., Russo, A., Sabelfeld, A.: Unifying facets of information integrity. In: Jha, S., Mathuria, A. (eds.) ICISS 2010. LNCS, vol. 6503, pp. 48\u201365. Springer, Heidelberg (2010). https:\/\/doi.org\/10.1007\/978-3-642-17714-9_5"},{"key":"2_CR6","unstructured":"BMW Labs. Automatically get an email every time you park your BMW with a map to where you\u2019re parked (2018). https:\/\/ifttt.com\/applets\/346212p-automatically-get-an-email-every-time-you-park-your-bmw-with-a-map-to-where-you-re-parked"},{"key":"2_CR7","unstructured":"Chen, E.Y., Gorbaty, S., Singhal, A., Jackson, C.: Self-Exfiltration: the dangers of browser-enforced information flow control. In: W2SP (2012)"},{"key":"2_CR8","doi-asserted-by":"crossref","unstructured":"Cohen, E.S.: Information transmission in computational systems. In: SOSP (1977)","DOI":"10.1145\/800214.806556"},{"key":"2_CR9","unstructured":"Cohen, E.S.: Information transmission in sequential programs. In: F. Sec. Comp. Academic Press (1978)"},{"key":"2_CR10","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1145\/359636.359712","volume":"20","author":"DE Denning","year":"1977","unstructured":"Denning, D.E., Denning, P.J.: Certification of programs for secure information flow. Commun. ACM 20, 504\u2013513 (1977)","journal-title":"Commun. ACM"},{"key":"2_CR11","unstructured":"Fernandes, E., Paupore, J., Rahmati, A., Simionato, D., Conti, M., Prakash, A.: FlowFence: practical data protection for emerging IoT application frameworks. In: USENIX Security (2016)"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Fernandes, E., Rahmati, A., Jung, J., Prakash, A.: Decentralized action integrity for trigger-action IoT platforms. In: NDSS (2018)","DOI":"10.14722\/ndss.2018.23119"},{"key":"2_CR13","unstructured":"General Data Protection Regulation, EU Regulation 2016\/679 (2018)"},{"issue":"1","key":"2_CR14","doi-asserted-by":"publisher","first-page":"186","DOI":"10.1145\/982962.964017","volume":"39","author":"Roberto Giacobazzi","year":"2004","unstructured":"Giacobazzi, R., Mastroeni, I.: Abstract non-interference: parameterizing non-interference by abstract interpretation. In: POPL (2004)","journal-title":"ACM SIGPLAN Notices"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Goguen, J.A., Meseguer, J.: Security policies and security models. In: IEEE S&P (1982)","DOI":"10.1109\/SP.1982.10014"},{"key":"2_CR16","doi-asserted-by":"crossref","unstructured":"Greiner, S., Grahl, D.: Non-interference with what-declassification in component-based systems. In: CSF (2016)","DOI":"10.1109\/CSF.2016.25"},{"key":"2_CR17","unstructured":"Groef, W.D., Devriese, D., Nikiforakis, N., Piessens, F.: Flowfox: a web browser with flexible and precise information flow control. In: ACM CCS (2012)"},{"key":"2_CR18","first-page":"181","volume":"24","author":"D Hedin","year":"2016","unstructured":"Hedin, D., Bello, L., Sabelfeld, A.: Information-flow security for JavaScript and its APIs. J. Comp. Sec. 24, 181\u2013234 (2016)","journal-title":"J. Comp. Sec."},{"key":"2_CR19","doi-asserted-by":"crossref","unstructured":"Hedin, D., Birgisson, A., Bello, L., Sabelfeld, A.: Jsflow: tracking information flow in JavaScript and its APIs. In: SAC, pp. 1663\u20131671. ACM (2014)","DOI":"10.1145\/2554850.2554909"},{"key":"2_CR20","unstructured":"Hedin, D., Sabelfeld, A.: A perspective on information-flow control. In: Software Safety and Security. IOS Press (2012)"},{"key":"2_CR21","unstructured":"IFTTT. How people use IFTTT today (2016). https:\/\/ifttt.com\/blog\/2016\/11\/connected-life-of-an-ifttt-user"},{"key":"2_CR22","unstructured":"IFTTT. 550 apps and devices now work with IFTTT (2017). https:\/\/ifttt.com\/blog\/2017\/09\/550-apps-and-devices-now-on-ifttt-infographic"},{"key":"2_CR23","unstructured":"MailChimp (2018). https:\/\/mailchimp.com"},{"key":"2_CR24","unstructured":"mcb. Sync all your new iOS Contacts to a Google Spreadsheet (2018). https:\/\/ifttt.com\/applets\/102384p-sync-all-your-new-ios-contacts-to-a-google-spreadsheet"},{"key":"2_CR25","doi-asserted-by":"crossref","unstructured":"Murray, T.C., Sison, R., Pierzchalski, E., Rizkallah, C.: Compositional verification and refinement of concurrent value-dependent noninterference. In: CSF (2016)","DOI":"10.1109\/CSF.2016.36"},{"key":"2_CR26","doi-asserted-by":"crossref","unstructured":"Myers, A.C., Liskov, B.: A decentralized model for information flow control. In: SOSP (1997)","DOI":"10.1145\/268998.266669"},{"key":"2_CR27","unstructured":"Poddebniak, D., et al.: Efail: breaking S\/MIME and OpenPGP email encryption using Exfiltration channels. In: USENIX Security (2018)"},{"key":"2_CR28","unstructured":"Russo, A., Sabelfeld, A., Li, K.: Implicit flows in malicious and nonmalicious code. In: Logics and Languages for Reliability and Security. IOS Press (2010)"},{"key":"2_CR29","unstructured":"Sabelfeld, A., Mantel, H.: Securing communication in a concurrent language. In: SAS (2002)"},{"key":"2_CR30","doi-asserted-by":"publisher","first-page":"59","DOI":"10.1023\/A:1011553200337","volume":"14","author":"A Sabelfeld","year":"2001","unstructured":"Sabelfeld, A., Sands, D.: A per model of secure information flow in sequential programs. High. Order Symb. Comput. 14, 59\u201391 (2001)","journal-title":"High. Order Symb. Comput."},{"key":"2_CR31","doi-asserted-by":"publisher","first-page":"517","DOI":"10.3233\/JCS-2009-0352","volume":"17","author":"A Sabelfeld","year":"2009","unstructured":"Sabelfeld, A., Sands, D.: Declassification: Dimensions and principles. JCS 17, 517\u2013548 (2009)","journal-title":"JCS"},{"key":"2_CR32","doi-asserted-by":"crossref","unstructured":"Schoepe, D., Balliu, M., Pierce, B.C., Sabelfeld, A.: Explicit secrecy: a policy for taint tracking. In: EuroS&P (2016)","DOI":"10.1109\/EuroSP.2016.14"},{"key":"2_CR33","doi-asserted-by":"crossref","unstructured":"Schwartz, E.J., Avgerinos, T., Brumley, D.: All you ever wanted to know about dynamic taint analysis and forward symbolic execution (but might have been afraid to ask). In: IEEE S&P (2010)","DOI":"10.1109\/SP.2010.26"},{"key":"2_CR34","doi-asserted-by":"crossref","unstructured":"Sen, S., Guha, S., Datta, A., Rajamani, S.K., Tsai, J.Y., Wing, J.M.: Bootstrapping privacy compliance in big data systems. In: IEEE S&P (2014)","DOI":"10.1109\/SP.2014.28"},{"key":"2_CR35","unstructured":"silvamerica. Add a map image of current location to Dropbox (2018). https:\/\/ifttt.com\/applets\/255978p-add-a-map-image-of-current-location-to-dropbox"},{"key":"2_CR36","doi-asserted-by":"crossref","unstructured":"Staicu, C.-A., Pradel, M., Livshits, B.: Understanding and automatically preventing injection attacks on Node.js. In: NDSS (2018)","DOI":"10.14722\/ndss.2018.23071"},{"key":"2_CR37","doi-asserted-by":"crossref","unstructured":"Surbatovich, M., Aljuraidan, J., Bauer, L., Das, A., Jia, L.: Some recipes can do more than spoil your appetite: analyzing the security and privacy risks of IFTTT recipes. In: WWW (2017)","DOI":"10.1145\/3038912.3052709"},{"key":"2_CR38","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/3-540-48294-6_20","volume-title":"Static Analysis","author":"D Volpano","year":"1999","unstructured":"Volpano, D.: Safety versus secrecy. In: Cortesi, A., Fil\u00e9, G. (eds.) SAS 1999. LNCS, vol. 1694, pp. 303\u2013311. Springer, Heidelberg (1999). https:\/\/doi.org\/10.1007\/3-540-48294-6_20"}],"container-title":["Lecture Notes in Computer Science","Secure IT Systems"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-03638-6_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,10,30]],"date-time":"2019-10-30T06:14:53Z","timestamp":1572416093000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-030-03638-6_2"}},"subtitle":["Addressing Privacy in IoT and Emailing Apps"],"short-title":[],"issued":{"date-parts":[[2018]]},"ISBN":["9783030036379","9783030036386"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-03638-6_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2018]]},"assertion":[{"value":"NordSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Nordic Conference on Secure IT Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Oslo","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Norway","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2018","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"28 November 2018","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30 November 2018","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"nordsec2018","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/securitylab.no\/nordsec18\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Double-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"81","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"29","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"0","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"36% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"3","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"4","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information"}}]}}