{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,2,27]],"date-time":"2026-02-27T03:46:42Z","timestamp":1772164002468,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":39,"publisher":"ACM","license":[{"start":{"date-parts":[[2011,6,4]],"date-time":"2011-06-04T00:00:00Z","timestamp":1307145600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2011,6,4]]},"DOI":"10.1145\/1993498.1993539","type":"proceedings-article","created":{"date-parts":[[2011,6,6]],"date-time":"2011-06-06T07:53:52Z","timestamp":1307346832000},"page":"343-354","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":18,"title":["A security policy oracle"],"prefix":"10.1145","author":[{"given":"Varun","family":"Srivastava","sequence":"first","affiliation":[{"name":"Yahoo!, Sunnyvale, CA, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Michael D.","family":"Bond","sequence":"additional","affiliation":[{"name":"The Ohio State University, Columbus, OH, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kathryn S.","family":"McKinley","sequence":"additional","affiliation":[{"name":"The University of Texas at Austin, Austin, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Vitaly","family":"Shmatikov","sequence":"additional","affiliation":[{"name":"The University of Texas at Austin, Austin, TX, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,6,4]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Amazon-CloudAmazon. Amazon Web Services. http:\/\/aws.amazon.com\/.  Amazon-CloudAmazon. Amazon Web Services. http:\/\/aws.amazon.com\/."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503275"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/832303.836911"},{"key":"e_1_3_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/503272.503274"},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/1217935.1217943"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10009-007-0044-z"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586142"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/5397.5399"},{"key":"e_1_3_2_1_9_1","first-page":"119","volume-title":"DARPA Information Survivability Conference and Exposition","author":"Cowan C.","year":"2000","unstructured":"C. Cowan , P. Wagle , C. Pu , S. Beattie , and J. Walpole . Buffer overflows: Attacks and defenses for the vulnerability of the decade . In DARPA Information Survivability Conference and Exposition , pages 119 -- 129 , 2000 . C. Cowan, P. Wagle, C. Pu, S. Beattie, and J. Walpole. Buffer overflows: Attacks and defenses for the vulnerability of the decade. In DARPA Information Survivability Conference and Exposition, pages 119--129, 2000."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/1250734.1250784"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/383721.383732"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/519621.853389"},{"key":"e_1_3_2_1_13_1","first-page":"169","volume-title":"Languages and Programming","author":"Emerson E. A.","year":"1980","unstructured":"E. A. Emerson and E. M. Clarke . Characterizing correctness properties of parallel programs using fixpoints. In Colloquium on Automata , Languages and Programming , pages 169 -- 181 , 1980 . E. A. Emerson and E. M. Clarke. Characterizing correctness properties of parallel programs using fixpoints. In Colloquium on Automata, Languages and Programming, pages 169--181, 1980."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/502034.502041"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2007.54"},{"key":"e_1_3_2_1_16_1","unstructured":"Google-CloudGoogle. Google Apps. http:\/\/www.google.com\/apps\/.  Google-CloudGoogle. Google Apps. http:\/\/www.google.com\/apps\/."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/155090.155099"},{"key":"e_1_3_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2005.02.005"},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1145\/1028664.1028717"},{"key":"e_1_3_2_1_20_1","unstructured":"IBM-CloudIBM. Cloud Computing. http:\/\/ibm.com\/developerworks\/cloud\/.  IBM-CloudIBM. Cloud Computing. http:\/\/ibm.com\/developerworks\/cloud\/."},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"publisher","DOI":"10.1145\/1181775.1181781"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/582419.582452"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.5555\/832308.837142"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1023\/B:SQJO.0000039793.31052.72"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1007\/11688839_5"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1181309.1181314"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1007\/BF01237234"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1007\/11531142_16"},{"key":"e_1_3_2_1_29_1","unstructured":"Salesforce-CloudSalesforce. Salesforce Platform. http:\/\/www.salesforce.com\/platform\/.  Salesforce-CloudSalesforce. Salesforce Platform. http:\/\/www.salesforce.com\/platform\/."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1368310.1368327"},{"key":"e_1_3_2_1_31_1","volume-title":"Dec 2009-Jan","author":"Srivastava V.","year":"2010","unstructured":"V. Srivastava . Vulnerabilities submitted to Classpath , Dec 2009-Jan 2010 . http:\/\/gcc.gnu.org\/bugzilla\/show_bug.cgi?id=42390. V. Srivastava. Vulnerabilities submitted to Classpath, Dec 2009-Jan 2010. http:\/\/gcc.gnu.org\/bugzilla\/show_bug.cgi?id=42390."},{"key":"e_1_3_2_1_32_1","unstructured":"V. Srivastava. Vulnerabilities submitted to Harmony Nov 2009. https:\/\/issues.apache.org\/jira\/browse\/HARMONY-6367.  V. Srivastava. Vulnerabilities submitted to Harmony Nov 2009. https:\/\/issues.apache.org\/jira\/browse\/HARMONY-6367."},{"key":"e_1_3_2_1_33_1","volume-title":"Jan-Oct","author":"Srivastava V.","year":"2010","unstructured":"V. Srivastava . Vulnerabilities submitted to Sun JDK , Jan-Oct 2010 . http:\/\/bugs.sun.com\/bugdatabase\/view_bug.do?bug_id=6914460. V. Srivastava. Vulnerabilities submitted to Sun JDK, Jan-Oct 2010. http:\/\/bugs.sun.com\/bugdatabase\/view_bug.do?bug_id=6914460."},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1145\/353171.353189"},{"key":"e_1_3_2_1_35_1","first-page":"379","volume-title":"USENIX Security Symposium","author":"Tan L.","year":"2008","unstructured":"L. Tan , X. Zhang , X. Ma , W. Xiong , and Y. Zhou . AutoISES: Automatically inferring security specifications and detecting violations . In USENIX Security Symposium , pages 379 -- 394 , 2008 . L. Tan, X. Zhang, X. Ma, W. Xiong, and Y. Zhou. AutoISES: Automatically inferring security specifications and detecting violations. In USENIX Security Symposium, pages 379--394, 2008."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/103135.103136"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1145\/566172.566212"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1145\/207110.207111"},{"key":"e_1_3_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629175.1629203"}],"event":{"name":"PLDI '11: ACM SIGPLAN Conference on Programming Language Design and Implementation","location":"San Jose California USA","acronym":"PLDI '11","sponsor":["SIGPLAN ACM Special Interest Group on Programming Languages"]},"container-title":["Proceedings of the 32nd ACM SIGPLAN Conference on Programming Language Design and Implementation"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1993498.1993539","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1993498.1993539","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T07:05:46Z","timestamp":1750230346000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1993498.1993539"}},"subtitle":["detecting security holes using multiple API implementations"],"short-title":[],"issued":{"date-parts":[[2011,6,4]]},"references-count":39,"alternative-id":["10.1145\/1993498.1993539","10.1145\/1993498"],"URL":"https:\/\/doi.org\/10.1145\/1993498.1993539","relation":{"is-identical-to":[{"id-type":"doi","id":"10.1145\/1993316.1993539","asserted-by":"object"}]},"subject":[],"published":{"date-parts":[[2011,6,4]]},"assertion":[{"value":"2011-06-04","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}