{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,3,27]],"date-time":"2025-03-27T20:48:03Z","timestamp":1743108483060,"version":"3.40.3"},"publisher-location":"Berlin, Heidelberg","reference-count":26,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642279362"},{"type":"electronic","value":"9783642279379"}],"license":[{"start":{"date-parts":[[2012,1,1]],"date-time":"2012-01-01T00:00:00Z","timestamp":1325376000000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/www.springer.com\/tdm"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-27937-9_14","type":"book-chapter","created":{"date-parts":[[2012,4,24]],"date-time":"2012-04-24T17:56:08Z","timestamp":1335290168000},"page":"193-209","source":"Crossref","is-referenced-by-count":1,"title":["Implementing Erasure Policies Using Taint Analysis"],"prefix":"10.1007","author":[{"given":"Filippo","family":"Del Tedesco","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Alejandro","family":"Russo","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Sands","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"14_CR1","unstructured":"The Perl programming language, \n                    \n                      http:\/\/www.perl.org\/"},{"key":"14_CR2","unstructured":"Bekman, S., Cholet, E.: Practical mod_perl. O\u2019Reilly and Associates (2003)"},{"key":"14_CR3","unstructured":"Chong, S., Myers, A.C.: Language-based information erasure. In: Proc. IEEE Computer Security Foundations Workshop, pp. 241\u2013254 (June 2005)"},{"key":"14_CR4","unstructured":"Chong, S.: Expressive and Enforceable Information Security Policies. Ph.D. thesis, Cornell University (August 2008)"},{"key":"14_CR5","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1109\/CSF.2008.12","volume-title":"CSF 2008: Proceedings of the 2008 21st IEEE Computer Security Foundations Symposium","author":"S. Chong","year":"2008","unstructured":"Chong, S., Myers, A.C.: End-to-end enforcement of erasure and declassification. In: CSF 2008: Proceedings of the 2008 21st IEEE Computer Security Foundations Symposium, pp. 98\u2013111. IEEE Computer Society, Washington, DC (2008)"},{"key":"14_CR6","unstructured":"Conti, J.J., Russo, A.: A taint mode for python via a library. OWASP AppSec Research (2010)"},{"issue":"7","key":"14_CR7","doi-asserted-by":"publisher","first-page":"504","DOI":"10.1145\/359636.359712","volume":"20","author":"D.E. Denning","year":"1977","unstructured":"Denning, D.E., Denning, P.J.: Certification of programs for secure information flow. Comm. of the ACM\u00a020(7), 504\u2013513 (1977)","journal-title":"Comm. of the ACM"},{"key":"14_CR8","unstructured":"Futoransky, A., Gutesman, E., Waissbein, A.: A dynamic technique for enhancing the security and privacy of web applications. In: Black Hat USA Briefings (August 2007)"},{"key":"14_CR9","first-page":"4","volume-title":"SSYM 2001: Proceedings of the 10th Conference on USENIX Security Symposium","author":"P. Gutmann","year":"2001","unstructured":"Gutmann, P.: Data remanence in semiconductor devices. In: SSYM 2001: Proceedings of the 10th Conference on USENIX Security Symposium, pp. 4\u20134. USENIX Association, Berkeley (2001)"},{"key":"14_CR10","unstructured":"Haldar, V., Chandra, D., Franz, M.: Dynamic Taint Propagation for Java. In: Proceedings of the 21st Annual Computer Security Applications Conference, pp. 303\u2013311 (2005)"},{"key":"14_CR11","unstructured":"Hansen, R.R., Probst, C.W.: Non-interference and erasure policies for java card bytecode. In: 6th International Workshop on Issues in the Theory of Security, WITS 2006 (2006)"},{"key":"14_CR12","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"239","DOI":"10.1007\/978-3-540-78739-6_19","volume-title":"Programming Languages and Systems","author":"S. Hunt","year":"2008","unstructured":"Hunt, S., Sands, D.: Just Forget it \u2013 The Semantics and Enforcement of Information Erasure. In: Gairing, M. (ed.) ESOP 2008. LNCS, vol.\u00a04960, pp. 239\u2013253. Springer, Heidelberg (2008)"},{"key":"14_CR13","doi-asserted-by":"crossref","unstructured":"Jovanovic, N., Kruegel, C., Kirda, E.: Pixy: A Static Analysis Tool for Detecting Web Application Vulnerabilities (Short Paper). In: 2006 IEEE Symposium on Security and Privacy, pp. 258\u2013263. IEEE Computer Society (2006)","DOI":"10.1109\/SP.2006.29"},{"key":"14_CR14","doi-asserted-by":"crossref","unstructured":"Kozlov, D., Petukhov, A.: Implementation of Tainted Mode approach to finding security vulnerabilities for Python technology. In: Proc. of Young Researchers\u2019 Colloquium on Software Engineering (SYRCoSE) (June 2007)","DOI":"10.15514\/SYRCOSE-2007-1-7"},{"key":"14_CR15","volume-title":"Learning Python","author":"M. Lutz","year":"2003","unstructured":"Lutz, M.: Learning Python. O\u2019Reilly & Associates, Inc., Sebastopol (2003)"},{"key":"14_CR16","doi-asserted-by":"crossref","unstructured":"Newsome, J., McCamant, S., Song, D.: Measuring channel capacity to distinguish undue influence. In: PLAS 2009: Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security, pp. 73\u201385. ACM (2009)","DOI":"10.1145\/1554339.1554349"},{"key":"14_CR17","doi-asserted-by":"crossref","unstructured":"Nguyen-Tuong, A., Guarnieri, S., Greene, D., Shirley, J., Evans, D.: Automatically Hardening Web Applications Using Precise Tainting. In: 20th IFIP International Information Security Conference, pp. 372\u2013382 (2005)","DOI":"10.21236\/ADA436667"},{"key":"14_CR18","doi-asserted-by":"publisher","first-page":"240","DOI":"10.1145\/1368310.1368344","volume-title":"ASIACCS 2008: Proceedings of the 2008 ACM Symposium on Information, Computer and Communications Security","author":"A. Pretschner","year":"2008","unstructured":"Pretschner, A., Hilty, M., Basin, D., Schaefer, C., Walter, T.: Mechanisms for usage control. In: ASIACCS 2008: Proceedings of the 2008 ACM Symposium on Information, Computer and Communications Security, pp. 240\u2013244. ACM, New York (2008)"},{"key":"14_CR19","unstructured":"Russo, A., Sabelfeld, A., Li, K.: Implicit flows in malicious and nonmalicious code. Marktoberdorf Summer School. IOS Press (2009)"},{"issue":"1","key":"14_CR20","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/JSAC.2002.806121","volume":"21","author":"A. Sabelfeld","year":"2003","unstructured":"Sabelfeld, A., Myers, A.C.: Language-based information-flow security. IEEE J. Selected Areas in Communications\u00a021(1), 5\u201319 (2003)","journal-title":"IEEE J. Selected Areas in Communications"},{"key":"14_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"174","DOI":"10.1007\/978-3-540-37621-7_9","volume-title":"Software Security - Theories and Systems","author":"A. Sabelfeld","year":"2004","unstructured":"Sabelfeld, A., Myers, A.C.: A Model for Delimited Information Release. In: Futatsugi, K., Mizoguchi, F., Yonezaki, N. (eds.) ISSS 2003. LNCS, vol.\u00a03233, pp. 174\u2013191. Springer, Heidelberg (2004)"},{"key":"14_CR22","unstructured":"Seo, J., Lam, M.S.: InvisiType: Object-Oriented Security Policies. In: 17th Annual Network and Distributed System Security Symposium, Internet Society, ISOC (February 2010)"},{"key":"14_CR23","doi-asserted-by":"crossref","unstructured":"Del Tedesco, F., Sands, D.: A user model for information erasure. In: 7th International Workshop on Security Issues in Concurrency, SecCo 2009. Electronic Proceedings in Theoretical Computer Science (2009)","DOI":"10.4204\/EPTCS.7.2"},{"key":"14_CR24","unstructured":"Thomas, D., Fowler, C., Hunt, A.: Programming Ruby. The Pragmatic Programmer\u2019s Guide. Pragmatic Programmers (2004)"},{"key":"14_CR25","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/3-540-48294-6_20","volume-title":"Static Analysis","author":"D. Volpano","year":"1999","unstructured":"Volpano, D.: Safety Versus Secrecy. In: Cortesi, A., Fil\u00e9, G. (eds.) SAS 1999. LNCS, vol.\u00a01694, pp. 303\u2013311. Springer, Heidelberg (1999)"},{"key":"14_CR26","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"227","DOI":"10.1007\/978-3-540-73538-0_17","volume-title":"Data and Applications Security XXI","author":"B. Zhao","year":"2007","unstructured":"Zhao, B., Sandhu, R., Zhang, X., Qin, X.: Towards a Times-Based Usage Control Model. In: Barker, S., Ahn, G.-J. (eds.) Data and Applications Security 2007. LNCS, vol.\u00a04602, pp. 227\u2013242. Springer, Heidelberg (2007)"}],"container-title":["Lecture Notes in Computer Science","Information Security Technology for Applications"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-27937-9_14","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,5,1]],"date-time":"2019-05-01T09:47:13Z","timestamp":1556704033000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-27937-9_14"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642279362","9783642279379"],"references-count":26,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-27937-9_14","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}