{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2024,9,7]],"date-time":"2024-09-07T09:49:28Z","timestamp":1725702568519},"publisher-location":"Berlin, Heidelberg","reference-count":38,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"type":"print","value":"9783642340253"},{"type":"electronic","value":"9783642340260"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2012]]},"DOI":"10.1007\/978-3-642-34026-0_2","type":"book-chapter","created":{"date-parts":[[2012,9,26]],"date-time":"2012-09-26T01:07:20Z","timestamp":1348621640000},"page":"4-18","source":"Crossref","is-referenced-by-count":0,"title":["Challenges in Defining a Programming Language for Provably Correct Dynamic Analyses"],"prefix":"10.1007","author":[{"given":"Eric","family":"Bodden","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Andreas","family":"Follner","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Siegfried","family":"Rasthofer","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","reference":[{"key":"2_CR1","unstructured":"Chrome Browser, https:\/\/www.google.com\/chrome"},{"key":"2_CR2","unstructured":"Safari Browser, http:\/\/www.apple.com\/safari\/"},{"key":"2_CR3","unstructured":"The WebKit Open-Source Project, http:\/\/www.webkit.org\/"},{"key":"2_CR4","unstructured":"Aderhold, M., Cu\u00e9llar, J., Mantel, H., Sudbrock, H.: Exemplary formalization of secure coding guidelines. Technical Report TUD-CS-2010-0060, TU Darmstadt, Germany (2010)"},{"key":"2_CR5","unstructured":"Aktug, I., Gurov, D., Piessens, F., Seehusen, F., Vanoverberghe, D., V\u00e9tillard, E.: Static analysis algorithms and tools for code-contract compliance, Public Deliverable D3.1.2, S3MS (2006), http:\/\/s3ms.org"},{"issue":"1","key":"2_CR6","doi-asserted-by":"publisher","first-page":"45","DOI":"10.1016\/j.entcs.2007.10.013","volume":"197","author":"I. Aktug","year":"2008","unstructured":"Aktug, I., Naliuka, K.: ConSpec\u2013a formal language for policy specification. Electronic Notes in Theoretical Computer Science\u00a0197(1), 45\u201358 (2008)","journal-title":"Electronic Notes in Theoretical Computer Science"},{"key":"2_CR7","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"86","DOI":"10.1007\/978-3-642-30564-1_6","volume-title":"Software Composition","author":"D. Ansaloni","year":"2012","unstructured":"Ansaloni, D., Binder, W., Bockisch, C., Bodden, E., Hatun, K., Marek, L., Qi, Z., Sarimbekov, A., Sewe, A., T\u016fma, P., Zheng, Y.: Challenges for Refinement and Composition of Instrumentations: Position Paper. In: Gschwind, T., De Paoli, F., Gruhn, V., Book, M. (eds.) SC 2012. LNCS, vol.\u00a07306, pp. 86\u201396. Springer, Heidelberg (2012)"},{"key":"2_CR8","unstructured":"The Aspect J. home page (2003)"},{"key":"2_CR9","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1145\/1554339.1554353","volume-title":"Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security, PLAS 2009","author":"T.H. Austin","year":"2009","unstructured":"Austin, T.H., Flanagan, C.: Efficient purely-dynamic information flow analysis. In: Proceedings of the ACM SIGPLAN Fourth Workshop on Programming Languages and Analysis for Security, PLAS 2009, pp. 113\u2013124. ACM, New York (2009)"},{"key":"2_CR10","doi-asserted-by":"publisher","first-page":"87","DOI":"10.1145\/1052898.1052906","volume-title":"Proceedings of the 4th International Conference on Aspect-Oriented Software Development, AOSD 2005","author":"P. Avgustinov","year":"2005","unstructured":"Avgustinov, P., Christensen, A.S., Hendren, L., Kuzins, S., Lhot\u00e1k, J., Lhot\u00e1k, O., de Moor, O., Sereni, D., Sittampalam, G., Tibble, J.: Abc: an extensible aspectj compiler. In: Proceedings of the 4th International Conference on Aspect-Oriented Software Development, AOSD 2005, pp. 87\u201398. ACM, New York (2005)"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Barnett, M., Leino, K., Schulte, W.: The spec# programming system: An overview. Construction and analysis of safe, secure, and interoperable smart devices, 49\u201369 (2005)","DOI":"10.1007\/978-3-540-30569-9_3"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Bisht, P., Venkatakrishnan, V.: Xss-guard: precise dynamic prevention of cross-site scripting attacks. Detection of Intrusions and Malware, and Vulnerability Assessment, 23\u201343 (2008)","DOI":"10.1007\/978-3-540-70542-0_2"},{"key":"2_CR13","unstructured":"Bodden, E.: Verifying finite-state properties of large-scale programs. PhD thesis, McGill University, Available in print through ProQuest (June 2009)"},{"key":"2_CR14","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1145\/1806799.1806805","volume-title":"Proceedings of the 32nd ACM\/IEEE International Conference on Software Engineering ICSE 2010","author":"E. Bodden","year":"2010","unstructured":"Bodden, E.: Efficient hybrid typestate analysis by determining continuation-equivalent states. In: Proceedings of the 32nd ACM\/IEEE International Conference on Software Engineering ICSE 2010, vol.\u00a01, pp. 5\u201314. ACM, New York (2010)"},{"key":"2_CR15","doi-asserted-by":"crossref","unstructured":"Bodden, E.: Continuation equivalence: a correctness criterion for static optimizations of dynamic analyses. In: WODA 2011: International Workshop on Dynamic Analysis, pp. 24\u201328. ACM (July 2011)","DOI":"10.1145\/2002951.2002958"},{"key":"2_CR16","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1145\/1390630.1390650","volume-title":"International Symposium on Software Testing and Analysis (ISSTA 2008)","author":"E. Bodden","year":"2008","unstructured":"Bodden, E., Havelund, K.: Racer: Effective race detection using AspectJ. In: International Symposium on Software Testing and Analysis (ISSTA 2008), Seattle, WA, pp. 155\u2013165. ACM, New York (2008)"},{"issue":"4","key":"2_CR17","doi-asserted-by":"publisher","first-page":"509","DOI":"10.1109\/TSE.2010.25","volume":"36","author":"E. Bodden","year":"2010","unstructured":"Bodden, E., Havelund, K.: Aspect-oriented race detection in Java. IEEE Transactions on Software Engineering (TSE)\u00a036(4), 509\u2013527 (2010)","journal-title":"IEEE Transactions on Software Engineering (TSE)"},{"key":"2_CR18","doi-asserted-by":"crossref","unstructured":"Bodden, E., Hendren, L.: The Clara framework for hybrid typestate analysis. International Journal on Software Tools for Technology Transfer (STTT), 1\u201320 (2010)","DOI":"10.1007\/s10009-010-0183-5"},{"key":"2_CR19","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"525","DOI":"10.1007\/978-3-540-73589-2_25","volume-title":"ECOOP 2007 \u2013 Object-Oriented Programming","author":"E. Bodden","year":"2007","unstructured":"Bodden, E., Hendren, L., Lhot\u00e1k, O.: A Staged Static Program Analysis to Improve the Performance of Runtime Monitoring. In: Bateni, M. (ed.) ECOOP 2007. LNCS, vol.\u00a04609, pp. 525\u2013549. Springer, Heidelberg (2007)"},{"key":"2_CR20","doi-asserted-by":"publisher","first-page":"36","DOI":"10.1145\/1453101.1453109","volume-title":"16th ACM SIGSOFT International Symposium on Foundations of Software Engineering (SIGSOFT 2008\/FSE-16)","author":"E. Bodden","year":"2008","unstructured":"Bodden, E., Lam, P., Hendren, L.: Finding programming errors earlier by evaluating runtime monitors ahead-of-time. In: 16th ACM SIGSOFT International Symposium on Foundations of Software Engineering (SIGSOFT 2008\/FSE-16), pp. 36\u201347. ACM, New York (2008)"},{"key":"2_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"183","DOI":"10.1007\/978-3-642-16612-9_15","volume-title":"Runtime Verification","author":"E. Bodden","year":"2010","unstructured":"Bodden, E., Lam, P., Hendren, L.: Clara: A Framework for Partially Evaluating Finite-State Runtime Monitors Ahead of Time. In: Barringer, H., Falcone, Y., Finkbeiner, B., Havelund, K., Lee, I., Pace, G., Ro\u015fu, G., Sokolsky, O., Tillmann, N. (eds.) RV 2010. LNCS, vol.\u00a06418, pp. 183\u2013197. Springer, Heidelberg (2010)"},{"key":"2_CR22","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1145\/1321631.1321651","volume-title":"Proceedings of the Twenty-Second IEEE\/ACM International Conference on Automated Software Engineering, ASE 2007","author":"M.B. Dwyer","year":"2007","unstructured":"Dwyer, M.B., Purandare, R.: Residual dynamic typestate analysis exploiting static analysis: results to reformulate and reduce the cost of dynamic analysis. In: Proceedings of the Twenty-Second IEEE\/ACM International Conference on Automated Software Engineering, ASE 2007, pp. 124\u2013133. ACM, New York (2007)"},{"key":"2_CR23","unstructured":"Erlingsson, U.: The inlined reference monitor approach to security policy enforcement. PhD thesis, Cornell University (2003)"},{"key":"2_CR24","unstructured":"Inostroza, M., Tanter, \u00c9., Bodden, E.: Modular reasoning with join point interfaces. Technical Report TUD-CS-2011-0272, CASED (October 2011)"},{"key":"2_CR25","doi-asserted-by":"crossref","unstructured":"Inostroza, M., Tanter, E., Bodden, E.: Join point interfaces for modular reasoning in aspect-oriented programs. In: ESEC\/FSE 2011: Joint Meeting of the European Software Engineering Conference and the ACM SIGSOFT Symposium on the Foundations of Software Engineering, pp. 508\u2013511 (2011)","DOI":"10.1145\/2025113.2025205"},{"key":"2_CR26","unstructured":"Jones, R.W.M., Kelly, P.H.J.: Backwards-compatible bounds checking for arrays and pointers in C programs. In: AADEBUG, pp. 13\u201326 (1997)"},{"key":"2_CR27","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"220","DOI":"10.1007\/BFb0053381","volume-title":"ECOOP \u201997 - Object-Oriented Programming","author":"G. Kiczales","year":"1997","unstructured":"Kiczales, G., Lamping, J., Mendhekar, A., Maeda, C., Lopes, C., Loingtier, J., Irwin, J.: Aspect-Oriented Programming. In: Aksit, M., Auletta, V. (eds.) ECOOP 1997. LNCS, vol.\u00a01241, pp. 220\u2013242. Springer, Heidelberg (1997)"},{"key":"2_CR28","doi-asserted-by":"publisher","first-page":"320","DOI":"10.1145\/2001420.2001459","volume-title":"Proceedings of the 2011 International Symposium on Software Testing and Analysis, ISSTA 2011","author":"W. Le","year":"2011","unstructured":"Le, W., Soffa, M.L.: Generating analyses for detecting faults in path segments. In: Proceedings of the 2011 International Symposium on Software Testing and Analysis, ISSTA 2011, pp. 320\u2013330. ACM, New York (2011)"},{"key":"2_CR29","first-page":"239","volume-title":"AOSD 2012","author":"L. Marek","year":"2012","unstructured":"Marek, L., Villaz\u00f3n, A., Zheng, Y., Ansaloni, D., Binder, W., Qi, Z.: Disl: a domain-specific language for bytecode instrumentation. In: AOSD 2012, pp. 239\u2013250. ACM, New York (2012)"},{"key":"2_CR30","doi-asserted-by":"publisher","first-page":"347","DOI":"10.1145\/1449764.1449792","volume-title":"Proceedings of the 23rd ACM SIGPLAN Conference on Object-Oriented Programming Systems Languages and Applications, OOPSLA 2008","author":"N.A. Naeem","year":"2008","unstructured":"Naeem, N.A., Lhotak, O.: Typestate-like analysis of multiple interacting objects. In: Proceedings of the 23rd ACM SIGPLAN Conference on Object-Oriented Programming Systems Languages and Applications, OOPSLA 2008, pp. 347\u2013366. ACM, New York (2008)"},{"key":"2_CR31","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"179","DOI":"10.1007\/978-3-642-19861-8_11","volume-title":"Compiler Construction","author":"J. Rodriguez","year":"2011","unstructured":"Rodriguez, J., Lhot\u00e1k, O.: Actor-Based Parallel Dataflow Analysis. In: Knoop, J. (ed.) CC 2011. LNCS, vol.\u00a06601, pp. 179\u2013197. Springer, Heidelberg (2011)"},{"key":"2_CR32","unstructured":"Ruwase, O., Lam, M.S.: A practical dynamic buffer overflow detector. In: Proceedings of the 11th Annual Network and Distributed System Security Symposium, pp. 159\u2013169 (2004)"},{"issue":"1","key":"2_CR33","doi-asserted-by":"publisher","first-page":"30","DOI":"10.1145\/353323.353382","volume":"3","author":"F. Schneider","year":"2000","unstructured":"Schneider, F.: Enforceable security policies. ACM Transactions on Information and System Security (TISSEC)\u00a03(1), 30\u201350 (2000)","journal-title":"ACM Transactions on Information and System Security (TISSEC)"},{"key":"2_CR34","unstructured":"Vogt, P., Nentwich, F., Jovanovic, N., Kirda, E., Kruegel, C., Vigna, G.: Cross-site scripting prevention with dynamic data tainting and static analysis. In: Proceeding of the Network and Distributed System Security Symposium (NDSS), vol.\u00a042 (2007)"},{"key":"2_CR35","unstructured":"W3C. Same-Origin Policy, http:\/\/www.w3.org\/Security\/wiki\/Same_Origin_Policy"},{"issue":"3","key":"2_CR36","doi-asserted-by":"publisher","first-page":"313","DOI":"10.1007\/s10703-005-3401-0","volume":"27","author":"S.H. Yong","year":"2005","unstructured":"Yong, S.H., Horwitz, S.: Using static analysis to reduce dynamic analysis overhead. Form. Methods Syst. Des.\u00a027(3), 313\u2013334 (2005)","journal-title":"Form. Methods Syst. Des."},{"key":"2_CR37","doi-asserted-by":"publisher","first-page":"349","DOI":"10.1145\/1375581.1375624","volume-title":"PLDI 2008","author":"K. Zee","year":"2008","unstructured":"Zee, K., Kuncak, V., Rinard, M.: Full functional verification of linked data structures. In: PLDI 2008, pp. 349\u2013361. ACM, New York (2008)"},{"key":"2_CR38","unstructured":"Zhivich, M., Leek, T., Lippmann, R.: Dynamic buffer overflow detection. In: Workshop on the Evaluation of Software Defect Detection Tools (2005)"}],"container-title":["Lecture Notes in Computer Science","Leveraging Applications of Formal Methods, Verification and Validation. Technologies for Mastering Change"],"original-title":[],"link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-642-34026-0_2.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,5,4]],"date-time":"2021-05-04T12:41:17Z","timestamp":1620132077000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-642-34026-0_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2012]]},"ISBN":["9783642340253","9783642340260"],"references-count":38,"URL":"https:\/\/doi.org\/10.1007\/978-3-642-34026-0_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"type":"print","value":"0302-9743"},{"type":"electronic","value":"1611-3349"}],"subject":[],"published":{"date-parts":[[2012]]}}}