Publications by Andrew C. Myers

Peer-reviewed publications

• End-to-End Enforcement of Erasure and Declassification
  Proceedings of the IEEE Computer Security Foundations Symposium, June 2008, to appear. Stephen Chong, Andrew C. Myers.
  
  
• Securing Nonintrusive Web Encryption through Information Flow
  Proceedings of the 3rd ACM SIGPLAN Workshop on Programming Languages and Security, June 2008, to appear. Lantian Zheng, Andrew C. Myers.
  
  
• Civitas: Toward a Secure Voting System
  Proceedings of the 2008 IEEE Symposium on Security and Privacy, Oakland, CA, May 2008, to appear. Michael R. Clarkson, Stephen Chong, Andrew C. Myers. [ Civitas web site ]
  
  
• Secure Web Applications via Automatic Partitioning
  Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP'07), pages 31–44, October 2007. Stephen Chong, Jed Liu, Andrew C. Myers, Xin Qi, K. Vikram, Lantian Zheng, Xin Zheng. (Best paper award) [ Swift web site ]
  
  
• SIF: Enforcing Confidentiality and Integrity in Web Applications
  Proceedings of the 16th USENIX Security Symposium, pages 1–16, August 2007. Stephen Chong, K. Vikram, Andrew C. Myers. [ HTML ] [ SIF web site ]
  
  
• Dynamic Security Labels and Static Information Flow Control
  International Journal of Information Security, 6(2–3), March 2007. Springer. Lantian Zheng, Andrew C. Myers.
  
  
• Quantifying Information Flow with Beliefs
  Journal of Computer Security, to appear. Michael R. Clarkson, Andrew C. Myers, Fred B. Schneider. Earlier version available as Cornell CIS Technical Report 2007-2075.
  
  
• J&: Nested Intersection for Scalable Software Composition
  Proceedings of the 21st ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications (OOPSLA'06), pages 21–36, October 2006. Nathaniel Nystrom, Xin Qi, Andrew C. Myers. [ J& web site ] [ J& technical teport ]
  
  
• Decentralized Robustness
  Proceedings of the 19^th IEEE Computer Security Foundations Workshop (CSFW'06), pages 242–253, July 2006. Stephen Chong, Andrew C. Myers.
  
  
• Enforcing Robust Declassification and Qualified Robustness
  Journal of Computer Security, 14(2):157–196, 2006. Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic.
  
  
• Interruptible Iterators
  Proceedings of the 33^rd ACM Symposium on Principles of Programming Languages (POPL'06), pages 283–294, January 2006. Jed Liu, Aaron Kimball, Andrew C. Myers. [ JMatch web site ]
  
  
• End-to-End Availability Policies and Noninterference
  Proceedings of the 18^th IEEE Computer Security Foundations Workshop (CSFW'05), pages 272–286, June 2005. Lantian Zheng, Andrew C. Myers.
  
  
• Belief in Information Flow
  Proceedings of the 18^th IEEE Computer Security Foundations Workshop (CSFW'05), pages 31–45, June 2005. Michael R. Clarkson, Andrew C. Myers, Fred B. Schneider.
  
  
• Language-Based Information Erasure
  Proceedings of the 18^th IEEE Computer Security Foundations Workshop (CSFW'05), pages 241–254, June 2005. Stephen Chong, Andrew C. Myers
  
  
• Trickles: A Stateless Network Stack for Improved Scalability, Resilience, and Flexibility
  2^nd USENIX Symposium on Networked Systems Design and Implementation (NSDI'05), pages 175–188, May 2005. Alan Shieh, Andrew C. Myers, Emin Gün Sirer. [ Trickles web site ]
  
  
• Supporting Workflow in a Course Management System
  Proceedings of the ACM Technical Symposium on Computer Science Education (SIGCSE), February 2005. Chavdar Botev, Hubert Chao, Theodore Chao, Raymond Doyle, Sergey Grankin, Jon Guarino, Saikat Guha, Pei-Chen Lee, Dan Perry, Christopher Re, Ilya Rifkin, Tingyan Yuan, Dora Abdullah, Kathy Carpenter, David Gries, Andrew C. Myers, and Jayavel Shanmugasundaram
  
  
• Security Policies for Downgrading
  Proceedings of the 11^th ACM Conference on Computer and Communications Security (CCS'04), pages 189–209, Washington, DC, USA, October 2004. Stephen Chong, Andrew C. Myers.
  
  
• Scalable Extensibility via Nested Inheritance
  Proceedings of the 19^th ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications (OOPSLA'04), pages 99–115, Vancouver, BC, Canada, October 2004. Nathaniel Nystrom, Stephen Chong, Andrew C. Myers. [Technical report including proof]
  
  
• Dynamic Security Labels and Noninterference
  Proceedings of the 2^nd IFIP TC1 WG1.7 Workshop on Formal Aspects in Security and Trust (FAST), IFIP volume 173, pages 27–40, Toulouse, France, August 2004. Lantian Zheng, Andrew C. Myers.
  
  
• Enforcing Robust Declassification
  Proceedings of the 17^th IEEE Computer Security Foundations Workshop, Pacific Grove, California, June 2004, pages 172–186. Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic. [This material is expanded and updated in the JCS paper.]
  
  
• A Model for Delimited Release
  Proceedings of the 2003 International Symposium on Software Security. LNCS 3233, Springer-Verlag, 2004, pages 174–191. Andrei Sabelfeld, Andrew C. Myers.
  
  
• Observational Determinism for Concurrent Program Security
  Proceedings of the 16^th IEEE Computer Security Foundations Workshop (CSFW), Pacific Grove, California, June 2003, pages 29–43. Steve Zdancewic, Andrew C. Myers
  
  
• Using Replication and Partitioning to Build Secure Distributed Systems
  Proceedings of the 2003 IEEE Symposium on Security and Privacy, Oakland, California, May 2003, pages 236–250. Lantian Zheng, Stephen Chong, Andrew C. Myers, Steve Zdancewic.
  
  
• Polyglot: An Extensible Compiler Framework for Java
  Proceedings of the 12^th International Conference on Compiler Construction (CC'03), Warsaw, Poland, April 2003. Lecture Notes in Computer Science 2622, pages 138–152. Nathaniel Nystrom, Michael R. Clarkson, Andrew C. Myers. [ Polyglot web site ]
  
  
• JMatch: Iterable Abstract Pattern Matching for Java
  Proceedings of the 5^th International Symposium on Practical Aspects of Declarative Languages, New Orleans, LA, pages 110–127, January 2003. Lecture Notes in Computer Science 2562. Jed Liu, Andrew C. Myers. [ JMatch web site ]
  
  
• Language-Based Information-Flow Security
  IEEE Journal on Selected Areas in Communications, special issue on Formal Methods for Security, 21(1):5–19, January 2003. Andrei Sabelfeld, Andrew C. Myers. [ PostScript | PDF ]
  
  
• Secure Information Flow via Linear Continuations
  Higher-Order and Symbolic Computation, 15(2–3):209–234, Sept. 2002. Steve Zdancewic, Andrew C. Myers. [ PDF ]
  
  
• Secure Program Partitioning
  ACM Transactions on Computing Systems (TOCS), 20(3):283–328, August 2002. Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers. Earlier version available as Cornell University Computer Science Technical Report TR2001-1846, October 2001. [ PostScript | PDF ]
  
  
• Untrusted Hosts and Confidentiality: Secure Program Partitioning
  Proceedings of the 18^th ACM Symposium on Operating Systems Principles (SOSP), Banff, Canada, pages 1–14, October 2001. Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers. (Best paper award) [ PostScript | PDF ]
  
  
• Robust Declassification
  Proceedings of the 14^th IEEE Computer Security Foundations Workshop, Cape Breton, Nova Scotia, Canada, June 2001, pages 15–23. Steve Zdancewic, Andrew C. Myers. [ PostScript ]
  
  
• Secure Information Flow and CPS
  Proceedings of the 10^th European Symposium on Programming, Genova, Italy, April 2001, pages 46–61. Steve Zdancewic, Andrew C. Myers.
  
  
• Protecting Privacy using the Decentralized Label Model
  ACM Transactions on Software Engineering and Methodology, 9(4):410–442, October 2000. Andrew C. Myers, Barbara Liskov [ PostScript |  PDF  ]
  
  
• JFlow: Practical Mostly-Static Information Flow Control
  Proceedings of the 26^th ACM Symposium on Principles of Programming Languages (POPL), San Antonio, Texas, January 1999, pages 228–241. Andrew C. Myers. [ PostScript | PDF ]
  
  
• Complete, Safe Information Flow with Decentralized Labels
  Proceedings of the 1998 IEEE Symposium on Security and Privacy, Oakland, California, May 1998, pages 186–197. Andrew C. Myers, Barbara Liskov. [ PostScript | PDF ]
  The slides from the conference presentation are also available [PostScript]
  
  
• A Decentralized Model for Information Flow Control.
  Proceedings of the 16^th ACM Symposium on Operating Systems Principles (SOSP), Saint-Malo, France, October 1997, pages 129–142. Andrew C. Myers, Barbara Liskov.
  The slides from the conference presentation are also available [PostScript]
  
  
• Hybrid Adaptive Caching for Distributed Storage Systems.
  Proceedings of the 16^th ACM Symposium on Operating Systems Principles (SOSP), Saint-Malo, France, October 1997, pages 102–115. Miguel Castro, Atul Adya, Barbara Liskov, Andrew C. Myers.
  
  
• Parameterized Types for Java
  Proceedings of the 24^th ACM Symposium on Principles of Programming Languages (POPL), pages 132–145, Paris, France, January 1997. Andrew C. Myers, Joseph A. Bank, Barbara Liskov.
  The slides from the conference presentation are also available [PostScript] [PolyJ web site]
  
  
• Safe and Efficient Sharing of Persistent Objects in Thor
  Proceedings of SIGMOD, Montreal, Canada, June 1996. ACM SIGMOD Record 25(2):318–329. B. Liskov, A. Adya, M. Castro, M. Day, R. Gruber, U. Maheshwari, A.C. Myers, L. Shrira.
  
  
• Bidirectional Object Layout for Separate Compilation
  Proceedings of the 10th ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications (OOPSLA'95), Austin, Texas, October 1995. ACM SIGPLAN Notices 30(10):124–139. Andrew C. Myers.
  The slides from the conference presentation are also available.
  
  
• Subtypes vs. Where Clauses: Constraining Parametric Polymorphism
  Proceedings of the 10th ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications (OOPSLA'95), Austin, Texas, October 1995. ACM SIGPLAN Notices 30(10):156–168. Mark Day, Robert Gruber, Barbara Liskov, Andrew C. Myers. [ PS ]
  
  
• A Meta-Object Protocol for Parameterized Types
  OOPSLA '94 Multi-Language Object Models Workshop, Portland, Oregon, October 1994. Andrew C. Myers.
  
  
• The Language-Independent Interface of the Thor Persistent Object System
  In Object-Oriented Multidatabase Systems (O. Bukhres and A. Elmagarmid, eds.) Prentice-Hall, 1994, pages 570–584. B. Liskov, M. Day, S. Ghemawat, R. Gruber, U. Maheshwari, A.C. Myers, L. Shrira.
  
  
• References to Remote Mobile Objects in Thor
  ACM Letters on Programming Languages and Systems, March 1994. M. Day, B. Liskov, U. Maheshwari, A.C. Myers.
  
  
• Resolving the Integrity–Performance Conflict
  Proceedings of the Fourth Workshop on Workstation Operating Systems (now HotOS), Napa Valley, California, October 1993, pages 156–159. Andrew C. Myers.
  
  
• Pade-Laplace Method for Analysis of Fluorescence Intensity Decay
  Biophysical Journal, Vol. 56, pages 79–93, July 1989. Zeljko Bajzer, Andrew C. Myers, Salah S. Sedarous, Franklyn G. Prendergast.
  
  
• Binding, Internalization, and Intracellular Processing of Proteins Interacting with Recycling Receptors: A Kinetic Analysis (abstract)
  Journal of Biological Chemistry, 264(23):13623–13631, 1989. Zeljko Bajzer, Stanimir Vuk-Pavlovic, Andrew C. Myers.
  
  
• Binding, Internalization, and Intracellular Processing of Protein Ligands: Derivation of Rate Constants by Computer Modeling. Journal of Biological Chemistry, 262(14), pages 6494–6499, May 1987. Andrew C. Myers, Stanimir Vuk-Pavlovic, John S. Kovach.

Technical Reports, Invited Papers, other Workshop Papers, etc.

• Family Sharing and Object Evolution: Technical Report
  Technical report, August 2007. Xin Qi and Andrew C. Myers.
  
  
• Civitas: A Secure Remote Voting System
  Cornell University Computing and Information Science Technical Report 2007-2081, May 2007. Michael R. Clarkson, Stephen Chong, Andrew C. Myers. [ Civitas web site ]
  
  
• Mobility, Ubiquity and Security
  Dagstuhl Seminar Proceedings 07091, February 2007. G. Barthe, H. Mantel, P. Müller, A. C. Myers, A. Sabelfeld (Eds.)
  
  
• Making Distributed Computation Trustworthy by Construction
  Cornell University Computing and Information Science Technical Report TR2006-2040, August 2006. Lantian Zheng, Andrew C. Myers.
  
  
• Jif Reference Manual
  Jif 3.0.0 Version, June 2006. Stephen Chong, Andrew C. Myers, K. Vikram, Lantian Zheng.
  
  
• Coercion-Resistant Remote Voting using Decryption Mixes
  Frontiers in Electronic Elections, September 2005. Michael R. Clarkson, Andrew C. Myers.
  
  
• End-to-end Availability Policies and Noninterference.
  Cornell University Computing and Information Science Technical Report TR2005-1987, 2005. Lantian Zheng, Andrew C. Myers.
  
  
• Programming with Explicit Security Policies
  Proceedings of the European Symposium on Programming, pages 1–4, April 2005. Invited talk [ slides ]. Andrew C. Myers.
  
  
• Scalable Extensibility via Nested Inheritance
  Cornell University Computing and Information Science Technical Report 2004-1940, June 2004. Nathaniel Nystrom, Stephen Chong, Andrew C. Myers.
  
  
• Dynamic Security Labels and Noninterference
  Cornell University Computing and Information Science Technical Report 2004-1924, January 2004. Lantian Zheng, Andrew C. Myers.
  
  
• JMatch: Java plus Pattern Matching
  Cornell University Computer Science Technical Report TR2002-1878, October 2002. Jed Liu, Andrew C. Myers
  
  
• Secure Program Partitioning
  Cornell University Computer Science Technical Report TR2001-1846, October 2001. Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers [ PostScript | PDF ]
  
  
• Confidentiality and Integrity with Untrusted Hosts: Technical Report
  Cornell University Computer Science Technical Report TR2000-1810, August 2000. Steve Zdancewic, Andrew C. Myers [ PostScript | PDF ]
  
  
• Mostly-Static Decentralized Information Flow Control
  PhD thesis, Massachusetts Institute of Technology, January 1999. Technical Report MIT/LCS/TR-783. Andrew C. Myers.
  Recipient of the George M. Sprowls Award for outstanding Ph.D. thesis in the MIT EECS Department [ PostScript | PDF ]
  
  
• ALSO: A Language for Extensible Multi-user Systems
  Proceedings of the 1996 MIT Student Workshop on Scalable Computing, August 1996. Andrew C. Myers.
  
  
• Parameterized Types and Java
  Technical Memo MIT/LCS/TM-553. MIT Laboratory for Computer Science. June 1996. Joseph A. Bank, Barbara Liskov, Andrew C. Myers.
  
  
• Efficient Implementation of Parameterized Types Despite Subtyping
  Thor Design Note 9. MIT Laboratory for Computer Science, Programming Methodology Group. June 1994. Andrew C. Myers, Barbara Liskov.
  
  
• Fast Object Operations in a Persistent Programming System
  Technical Report MIT/LCS/TR-599. MIT Laboratory for Computer Science, MA, January 1994. Andrew C. Myers. Master's thesis.

Supervised Ph.D. Theses

• Stephen Chong. Expressive and Enforceable Information Security Policies
  Ph.D. thesis, Cornell University Department of Computer Science. August 2008.
  
  
• Lantian Zheng. Making Distributed Computation Secure by Construction
  Ph.D. thesis, Cornell University Department of Computer Science. January 2007.
  
  
• Nathaniel Nystrom. Programming Languages for Scalable Software Extension and Composition.
  Ph.D. thesis, Cornell University Department of Computer Science. November 2006.
  
  
• Steve Zdancewic. Programming Languages for Information Security.
  Ph.D. thesis, Cornell University Department of Computer Science. August 2002.

---

Citing these papers

To provide a URL citation for one of these documents, please use http://www.cs.cornell.edu/andru/pubs.html

Viewing these papers

Older documents are available in gzipped PostScript; newer ones in PDF. These days it is pretty easy to convert between the formats. If you are using Windows, you may need a PostScript previewer; a good previewer for Windows is GSview. Several slide sets are generated by PowerPoint on Windows NT, which unfortunately produces rather bad PostScript (sorry). Some documents are also available in HTML.

Distributing these papers

The papers distributed here have been provided by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a noncommercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.