{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,5]],"date-time":"2024-09-05T04:54:48Z","timestamp":1725512088881},"publisher-location":"Berlin, Heidelberg","reference-count":21,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783540717720"},{"type":"electronic","value":"9783540717744"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-71774-4_7","type":"book-chapter","created":{"date-parts":[[2007,6,27]],"date-time":"2007-06-27T09:24:49Z","timestamp":1182936289000},"page":"59-68","source":"Crossref","is-referenced-by-count":0,"title":["Program Analysis for Security and Privacy"],"prefix":"10.1007","author":[{"given":"Marco","family":"Pistoia","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Francesco","family":"Logozzo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"7_CR1","doi-asserted-by":"crossref","unstructured":"Centonze, P., et al.: Role-Based Access Control Consistency Validation. In: Proceedings of the International Symposium on Software Testing and Analysis (ISSTA \u201906), Portland, Maine, USA, July (2006)","DOI":"10.1145\/1146238.1146253"},{"key":"7_CR2","volume-title":"Programming .NET Security","author":"A. Freeman","year":"2003","unstructured":"Freeman, A., Jones, A.: Programming.NET Security. O\u2019Reilly & Associates, Inc., Sebastopol (June 2003)"},{"key":"7_CR3","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1109\/SP.2005.1","volume-title":"Proceedings of the 2005 IEEE Symposium on Security and Privacy","author":"R. Gopalakrishna","year":"2005","unstructured":"Gopalakrishna, R., Spafford, E.H., Vitek, J.: Efficient Intrusion Detection Using Automaton Inlining. In: Proceedings of the 2005 IEEE Symposium on Security and Privacy, Oakland, CA, USA, May 2005, pp. 18\u201331. IEEE Computer Society Press, Los Alamitos (2005)"},{"key":"7_CR4","unstructured":"Grandy, H., Stenzel, K., Reif, W.: Refinement of Security Protocol Data Types to Java. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)"},{"key":"7_CR5","volume-title":"Proceedings of IEEE International Symposium on Secure Software Engineering","author":"C. Hammer","year":"2006","unstructured":"Hammer, C., Krinke, J., Snelting, G.: Information Flow Control for Java Based on Path Conditions in Dependence Graphs. In: Proceedings of IEEE International Symposium on Secure Software Engineering, Arlington, Virginia, USA, IEEE Computer Society Press, Los Alamitos (2006)"},{"key":"7_CR6","doi-asserted-by":"publisher","first-page":"359","DOI":"10.1145\/582419.582452","volume-title":"Proceedings of the 17th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications","author":"L. Koved","year":"2002","unstructured":"Koved, L., Pistoia, M., Kershenbaum, A.: Access Rights Analysis for Java. In: Proceedings of the 17th ACM SIGPLAN Conference on Object-Oriented Programming, Systems, Languages, and Applications, Seattle, WA, USA, November 2002, pp. 359\u2013372. ACM Press, New York (2002), doi:10.1145\/582419.582452"},{"key":"7_CR7","doi-asserted-by":"crossref","unstructured":"Li, W., Lam, L.-c., Chiueh, T.-c.: Application Specific Sandboxing for Win32\/Intel Binaries. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)","DOI":"10.1109\/ISIAS.2007.4299802"},{"key":"7_CR8","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44898-5_3","volume-title":"Static Analysis","author":"F. Logozzo","year":"2003","unstructured":"Logozzo, F.: Class-level modular analysis for object oriented languages. In: Cousot, R. (ed.) SAS 2003. LNCS, vol.\u00a02694, Springer, Heidelberg (2003)"},{"key":"7_CR9","series-title":"Lecture Notes in Computer Science","volume-title":"Verification, Model Checking, and Abstract Interpretation","author":"F. Logozzo","year":"2004","unstructured":"Logozzo, F.: Automatic inference of class invariants. In: Steffen, B., Levi, G. (eds.) VMCAI 2004. LNCS, vol.\u00a02937, Springer, Heidelberg (2004)"},{"key":"7_CR10","doi-asserted-by":"crossref","unstructured":"Naumovich, G.: A Conservative Algorithm for Computing the Flow of Permissions in Java Programs. In: Proceedings of the International Symposium on Software Testing and Analysis (ISSTA \u201902), Rome, Italy, July, pp. 33\u201343 (2002)","DOI":"10.1145\/566172.566178"},{"issue":"5","key":"7_CR11","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1022494.1022530","volume":"29","author":"G. Naumovich","year":"2004","unstructured":"Naumovich, G., Centonze, P.: Static Analysis of Role-Based Access Control in J2EE Applications. SIGSOFT Software Engineering Notes\u00a029(5), 1\u201310 (2004), doi:10.1145\/1022494.1022530","journal-title":"SIGSOFT Software Engineering Notes"},{"key":"7_CR12","unstructured":"Nguyen, N., Rathke, J.: Typed Static Analysis for Concurrent, Policy-Based, Resource Access Control. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)"},{"key":"7_CR13","unstructured":"Pistoia, M.: Keynote: Static Analysis for Stack-Inspection and Role-Based Access Control Systems. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)"},{"key":"7_CR14","unstructured":"Pistoia, M., Fink, S.J., Flynn, R.J., Yahav, E.: When Role Models Have Flaws: Static Validation of Enterprise Security Policies. Technical Report RC24056 (W0609-065), IBM Corporation, Thomas J. Watson Research Center, Yorktown Heights, NY, USA (September 2006)"},{"key":"7_CR15","unstructured":"Pistoia, M., Flynn, R.J.: Interprocedural Analysis for Automatic Evaluation of Role-Based Access Control Policies. Technical Report RC23846 (W0511-020), IBM Corporation, Thomas J. Watson Research Center, Yorktown Heights, NY, USA (November 2005)"},{"key":"7_CR16","series-title":"Lecture Notes in Computer Science","volume-title":"ECOOP 2005 - Object-Oriented Programming","author":"M. Pistoia","year":"2005","unstructured":"Pistoia, M., et al.: Interprocedural Analysis for Privileged Code Placement and Tainted Variable Detection. In: Black, A.P. (ed.) ECOOP 2005. LNCS, vol.\u00a03586, Springer, Heidelberg (2005)"},{"key":"7_CR17","volume-title":"Enterprise Java Security","author":"M. Pistoia","year":"2004","unstructured":"Pistoia, M., et al.: Enterprise Java Security. Addison-Wesley, Reading (February 2004)"},{"key":"7_CR18","volume-title":"Java 2 Network Security","author":"M. Pistoia","year":"1999","unstructured":"Pistoia, M., et al.: Java 2 Network Security, 2nd edn. Prentice Hall PTR, Upper Saddle River (August 1999)","edition":"2"},{"key":"7_CR19","doi-asserted-by":"publisher","first-page":"1278","DOI":"10.1109\/PROC.1975.9939","volume":"63","author":"J.H. Saltzer","year":"1975","unstructured":"Saltzer, J.H., Schroeder, M.D.: The Protection of Information in Computer Systems. Proceedings of the IEEE\u00a063, 1278\u20131308 (1975)","journal-title":"Proceedings of the IEEE"},{"key":"7_CR20","unstructured":"Vitek, J.: Keynote: Advance in Intrusion Detection. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)"},{"key":"7_CR21","unstructured":"Yin, J., et al.: On Estimating the Security Risks of Composite Software Services. In: First Program Analysis for Security and Safety Workshop Discussion (PASSWORD 2006), co-located with the Twentieth European Conference on Object-Oriented Programming (ECOOP 2006), Nantes, France, July (2006)"}],"container-title":["Lecture Notes in Computer Science","Object-Oriented Technology. ECOOP 2006 Workshop Reader"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-71774-4_7.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2020,11,19]],"date-time":"2020-11-19T05:26:04Z","timestamp":1605763564000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-71774-4_7"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540717720","9783540717744"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-71774-4_7","relation":{},"subject":[]}}