{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,25]],"date-time":"2026-04-25T08:49:11Z","timestamp":1777106951397,"version":"3.51.4"},"reference-count":19,"publisher":"Association for Computing Machinery (ACM)","issue":"11","license":[{"start":{"date-parts":[[2011,11,1]],"date-time":"2011-11-01T00:00:00Z","timestamp":1320105600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000185","name":"Defense Advanced Research Projects Agency","doi-asserted-by":"publisher","award":["CNS-0430425"],"award-info":[{"award-number":["CNS-0430425"]}],"id":[{"id":"10.13039\/100000185","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["CNS-0430425"],"award-info":[{"award-number":["CNS-0430425"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000144","name":"Division of Computer and Network Systems","doi-asserted-by":"publisher","award":["CNS-0716806"],"award-info":[{"award-number":["CNS-0716806"]}],"id":[{"id":"10.13039\/100000144","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["Commun. ACM"],"published-print":{"date-parts":[[2011,11]]},"abstract":"<jats:p>HiStar is a new operating system designed to minimize the amount of code that must be trusted. HiStar provides strict information flow control, which allows users to specify precise data security policies without unduly limiting the structure of applications. HiStar's security features make it possible to implement a Unix-like environment with acceptable performance almost entirely in an untrusted user-level library. The system has no notion of superuser and no fully trusted code other than the kernel. HiStar's features permit several novel applications, including privacy-preserving, untrusted virus scanners and a dynamic Web server with only a few thousand lines of trusted code.<\/jats:p>","DOI":"10.1145\/2018396.2018419","type":"journal-article","created":{"date-parts":[[2011,10,25]],"date-time":"2011-10-25T12:23:05Z","timestamp":1319545385000},"page":"93-101","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":51,"title":["Making information flow explicit in HiStar"],"prefix":"10.1145","volume":"54","author":[{"given":"Nickolai","family":"Zeldovich","sequence":"first","affiliation":[{"name":"Massachusetts Institute of Technology, CSAIL, Cambridge, MA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Silas","family":"Boyd-Wickizer","sequence":"additional","affiliation":[{"name":"Massachusetts Institute of Technology, CSAIL, Cambridge, MA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Eddie","family":"Kohler","sequence":"additional","affiliation":[{"name":"University of California, Los Angeles, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"David","family":"Mazi\u00e8res","sequence":"additional","affiliation":[{"name":"Stanford University, Stanford, CA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2011,11]]},"reference":[{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/646405.692230"},{"key":"e_1_2_1_4_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095810.1095813"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.5555\/882494.884406"},{"key":"e_1_2_1_6_1","volume-title":"Proceedings of the","author":"Hamilton G.","year":"1993","unstructured":"Hamilton , G. , Kougiouris , P. The Spring nucleus: a microkernel for objects . In Proceedings of the Summer 1993 USENIX (Cincinnati, OH, April 1993), 147--159. Hamilton, G., Kougiouris, P. The Spring nucleus: a microkernel for objects. In Proceedings of the Summer 1993 USENIX (Cincinnati, OH, April 1993), 147--159."},{"key":"e_1_2_1_7_1","volume-title":"Proceedings of the 10th Workshop on Hot Topics in Operating Systems","author":"Krohn M.","year":"2005","unstructured":"Krohn , M. , Efstathopoulos , P. , Frey , C. , Kaashoek , F. , Kohler , E. , Mazi\u00e8res , D. , Morris , R. , Osborne , M. , VanDeBogart , S. , Ziegler , D. Make least privilege a right (not a privilege) . In Proceedings of the 10th Workshop on Hot Topics in Operating Systems ( Santa Fe, NM , June 2005 ). Krohn, M., Efstathopoulos, P., Frey, C., Kaashoek, F., Kohler, E., Mazi\u00e8res, D., Morris, R., Osborne, M., VanDeBogart, S., Ziegler, D. Make least privilege a right (not a privilege). In Proceedings of the 10th Workshop on Hot Topics in Operating Systems (Santa Fe, NM, June 2005)."},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/1294261.1294293"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/356850.356852"},{"key":"e_1_2_1_10_1","volume-title":"The Register","author":"Leyden J.","year":"2005","unstructured":"Leyden , J. Anti-virus vulnerabilities strike again . The Register , March 2005 . http:\/\/www.theregister.co.uk\/2005\/03\/18\/mcafee_vuln\/ Leyden, J. Anti-virus vulnerabilities strike again. The Register, March 2005. http:\/\/www.theregister.co.uk\/2005\/03\/18\/mcafee_vuln\/"},{"key":"e_1_2_1_11_1","volume-title":"Proceedings of the 2001 USENIX","author":"Loscocco P.","year":"2001","unstructured":"Loscocco , P. , Smalley , S. Integrating flexible support for security policies into the Linux operating system . In Proceedings of the 2001 USENIX ( Boston, MA , June 2001 ), 29--40, FREENIX track. Loscocco, P., Smalley, S. Integrating flexible support for security policies into the Linux operating system. In Proceedings of the 2001 USENIX (Boston, MA, June 2001), 29--40, FREENIX track."},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1002\/spe.4380220805"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/363516.363526"},{"key":"e_1_2_1_14_1","volume-title":"May","author":"Naraine R.","year":"2006","unstructured":"Naraine , R. Symantec antivirus worm hole puts millions at risk. eWeek.com , May 2006 . http:\/\/www.eweek.com\/article2\/0,1895,1967941,00.asp Naraine, R. Symantec antivirus worm hole puts millions at risk. eWeek.com, May 2006. http:\/\/www.eweek.com\/article2\/0,1895,1967941,00.asp"},{"key":"e_1_2_1_15_1","volume-title":"January","author":"Peterson D.","year":"2008","unstructured":"Peterson , D. Anti-virus rife with vulnerabilities. digitalbond.com , January 2008 . http:\/\/www.digitalbond.com\/index.php\/2008\/01\/07\/anti-virus-rife-with-vulnerabilities\/ Peterson, D. Anti-virus rife with vulnerabilities. digitalbond.com, January 2008. http:\/\/www.digitalbond.com\/index.php\/2008\/01\/07\/anti-virus-rife-with-vulnerabilities\/"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/800212.806498"},{"key":"e_1_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/319151.319163"},{"key":"e_1_2_1_18_1","volume-title":"Proceedings of the 7th OSDI","author":"Zeldovich N.","year":"2006","unstructured":"Zeldovich , N. , Boyd-Wickizer , S. , Kohler , E. , Mazi\u00e8res , D. Making information flow explicit in HiStar . In Proceedings of the 7th OSDI ( Seattle, WA , November 2006 ), 263--278. Zeldovich, N., Boyd-Wickizer, S., Kohler, E., Mazi\u00e8res, D. Making information flow explicit in HiStar. In Proceedings of the 7th OSDI (Seattle, WA, November 2006), 263--278."},{"key":"e_1_2_1_19_1","volume-title":"Proceedings of the 5th NSDI","author":"Zeldovich N.","year":"2008","unstructured":"Zeldovich , N. , Boyd-Wickizer , S. , Mazi\u00e8res , D. Securing distributed systems with information flow control . In Proceedings of the 5th NSDI ( San Francisco, CA , April 2008 ), 293--308. Zeldovich, N., Boyd-Wickizer, S., Mazi\u00e8res, D. Securing distributed systems with information flow control. In Proceedings of the 5th NSDI (San Francisco, CA, April 2008), 293--308."},{"key":"e_1_2_1_20_1","volume-title":"Proceedings of the 8th OSDI","author":"Zeldovich N.","year":"2008","unstructured":"Zeldovich , N. , Kannan , H. , Dalton , M. , Kozyrakis , C. Hardware enforcement of application security policies . In Proceedings of the 8th OSDI ( San Diego, CA , December 2008 ), 225--240. Zeldovich, N., Kannan, H., Dalton, M., Kozyrakis, C. Hardware enforcement of application security policies. In Proceedings of the 8th OSDI (San Diego, CA, December 2008), 225--240."},{"key":"e_1_2_1_21_1","unstructured":"Zoller T. Clamav 0.94 and below---evasion and bypass due to malformed archive. April 2009. http:\/\/blog.zoller.lu\/2009\/04\/clamav-094-and-below-evasion-and-bypass.html  Zoller T. Clamav 0.94 and below---evasion and bypass due to malformed archive. April 2009. http:\/\/blog.zoller.lu\/2009\/04\/clamav-094-and-below-evasion-and-bypass.html"}],"container-title":["Communications of the ACM"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2018396.2018419","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2018396.2018419","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T11:00:04Z","timestamp":1750244404000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2018396.2018419"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2011,11]]},"references-count":19,"journal-issue":{"issue":"11","published-print":{"date-parts":[[2011,11]]}},"alternative-id":["10.1145\/2018396.2018419"],"URL":"https:\/\/doi.org\/10.1145\/2018396.2018419","relation":{},"ISSN":["0001-0782","1557-7317"],"issn-type":[{"value":"0001-0782","type":"print"},{"value":"1557-7317","type":"electronic"}],"subject":[],"published":{"date-parts":[[2011,11]]},"assertion":[{"value":"2011-11-01","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}