Peer-reviewed publications
-
End-to-End Enforcement of Erasure and Declassification
Proceedings of the IEEE Computer Security Foundations Symposium,
June 2008, to appear.
Stephen Chong, Andrew C. Myers.
-
Securing Nonintrusive Web Encryption through Information Flow
Proceedings of the 3rd ACM SIGPLAN Workshop on Programming Languages
and Security,
June 2008, to appear.
Lantian Zheng, Andrew C. Myers.
-
Civitas: Toward a Secure Voting System
Proceedings of the 2008 IEEE Symposium on Security and Privacy,
Oakland, CA, May 2008, to appear.
Michael R. Clarkson, Stephen Chong, Andrew C. Myers.
[ Civitas web site ]
-
Secure Web Applications via Automatic Partitioning
Proceedings of the 21st ACM Symposium on Operating Systems Principles (SOSP'07),
pages 31–44, October 2007.
Stephen Chong, Jed Liu, Andrew C. Myers, Xin Qi, K. Vikram, Lantian Zheng,
Xin Zheng. (Best paper award) [ Swift web site ]
-
SIF: Enforcing Confidentiality and Integrity in Web Applications
Proceedings of the 16th USENIX Security Symposium,
pages 1–16, August 2007.
Stephen Chong, K. Vikram, Andrew C. Myers.
[ HTML ]
[ SIF web site ]
-
Dynamic Security Labels and Static Information Flow Control
International Journal of Information Security,
6(2–3), March 2007.
Springer. Lantian Zheng, Andrew C. Myers.
-
Quantifying Information Flow with Beliefs
Journal of Computer Security, to appear.
Michael R. Clarkson, Andrew C. Myers, Fred B. Schneider.
Earlier version available as
Cornell CIS Technical Report 2007-2075.
- J&: Nested Intersection for Scalable Software Composition
Proceedings of the 21st ACM Conference on
Object-Oriented Programming Languages,
Systems, Languages, and Applications (OOPSLA'06), pages 21–36,
October 2006.
Nathaniel Nystrom, Xin Qi, Andrew C. Myers.
[ J& web site ]
[ J& technical teport ]
- Decentralized Robustness
Proceedings of the 19th IEEE Computer Security Foundations Workshop (CSFW'06), pages 242–253, July 2006. Stephen Chong, Andrew C. Myers.
- Enforcing Robust Declassification and Qualified Robustness
Journal of Computer Security, 14(2):157–196, 2006.
Andrew C. Myers, Andrei Sabelfeld, Steve Zdancewic.
-
Interruptible Iterators
Proceedings of the
33rd ACM Symposium on Principles of Programming Languages (POPL'06),
pages 283–294, January 2006. Jed Liu, Aaron Kimball, Andrew C. Myers.
[ JMatch web site ]
-
End-to-End Availability Policies and Noninterference
Proceedings of the 18th IEEE Computer Security Foundations Workshop (CSFW'05),
pages 272–286,
June 2005. Lantian Zheng, Andrew C. Myers.
-
Belief in Information Flow
Proceedings of the 18th IEEE Computer Security Foundations Workshop (CSFW'05),
pages 31–45,
June 2005. Michael R. Clarkson, Andrew C. Myers, Fred B. Schneider.
-
Language-Based Information Erasure
Proceedings of the 18th IEEE Computer Security Foundations Workshop (CSFW'05),
pages 241–254,
June 2005. Stephen Chong, Andrew C. Myers
-
Trickles:
A Stateless Network Stack for
Improved Scalability, Resilience, and Flexibility
2nd USENIX Symposium on Networked Systems Design and Implementation (NSDI'05),
pages 175–188, May 2005. Alan Shieh, Andrew C. Myers, Emin Gün Sirer.
[ Trickles web site ]
-
Supporting Workflow in a Course Management System
Proceedings of the ACM Technical Symposium on Computer Science
Education (SIGCSE), February 2005.
Chavdar Botev, Hubert Chao, Theodore Chao, Raymond Doyle,
Sergey Grankin, Jon Guarino, Saikat Guha, Pei-Chen Lee,
Dan Perry, Christopher Re, Ilya Rifkin, Tingyan Yuan,
Dora Abdullah, Kathy Carpenter, David Gries, Andrew C. Myers,
and Jayavel Shanmugasundaram
-
Security Policies for Downgrading
Proceedings of the 11th ACM Conference on Computer and Communications Security (CCS'04),
pages 189–209, Washington, DC, USA, October 2004. Stephen Chong,
Andrew C. Myers.
- Scalable Extensibility via
Nested Inheritance
Proceedings of the 19th ACM Conference on
Object-Oriented Programming Languages,
Systems, Languages, and Applications
(OOPSLA'04), pages 99–115, Vancouver, BC, Canada, October 2004.
Nathaniel Nystrom, Stephen Chong, Andrew C. Myers.
[Technical report including proof]
-
Dynamic Security Labels and Noninterference
Proceedings of the 2nd IFIP TC1 WG1.7 Workshop on Formal Aspects in Security and Trust (FAST), IFIP volume 173, pages 27–40, Toulouse, France, August 2004.
Lantian Zheng, Andrew C. Myers.
- Enforcing Robust Declassification
Proceedings of the 17th
IEEE Computer Security Foundations Workshop, Pacific Grove,
California, June 2004, pages 172–186. Andrew C. Myers,
Andrei Sabelfeld, Steve Zdancewic. [This material is expanded and
updated in the JCS paper.]
- A Model for Delimited Release
Proceedings of the 2003 International Symposium on Software
Security. LNCS 3233, Springer-Verlag, 2004, pages 174–191.
Andrei Sabelfeld, Andrew C. Myers.
- Observational Determinism for Concurrent
Program Security
Proceedings of the 16th
IEEE Computer Security Foundations Workshop (CSFW), Pacific Grove,
California, June 2003, pages 29–43. Steve Zdancewic, Andrew C. Myers
- Using Replication and Partitioning to Build Secure Distributed Systems
Proceedings of the 2003 IEEE Symposium on Security and Privacy,
Oakland, California, May 2003, pages 236–250.
Lantian Zheng, Stephen Chong, Andrew C. Myers, Steve Zdancewic.
- Polyglot: An Extensible Compiler Framework for Java
Proceedings of the 12th International Conference on Compiler Construction (CC'03),
Warsaw, Poland, April 2003. Lecture Notes in Computer Science 2622, pages 138–152. Nathaniel Nystrom, Michael R. Clarkson, Andrew C. Myers. [ Polyglot
web site ]
-
JMatch: Iterable Abstract Pattern Matching for Java
Proceedings of the 5th International Symposium on Practical Aspects of Declarative Languages,
New Orleans, LA, pages 110–127, January 2003.
Lecture Notes in Computer Science 2562.
Jed Liu, Andrew C. Myers. [ JMatch
web site ]
- Language-Based Information-Flow Security
IEEE Journal on Selected Areas in Communications, special issue on
Formal Methods for Security, 21(1):5–19, January 2003. Andrei
Sabelfeld, Andrew C. Myers. [ PostScript
| PDF ]
- Secure Information Flow via Linear
Continuations
Higher-Order and Symbolic Computation, 15(2–3):209–234,
Sept. 2002.
Steve Zdancewic, Andrew C. Myers. [ PDF ]
- Secure Program Partitioning
ACM Transactions on Computing Systems (TOCS), 20(3):283–328, August
2002. Steve
Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers. Earlier
version available as Cornell University Computer Science Technical Report TR2001-1846,
October 2001. [ PostScript | PDF ]
- Untrusted Hosts and Confidentiality: Secure Program
Partitioning
Proceedings of the 18th ACM Symposium on Operating Systems
Principles (SOSP), Banff, Canada, pages 1–14, October 2001.
Steve Zdancewic,
Lantian Zheng, Nathaniel Nystrom, Andrew C. Myers. (Best paper award) [ PostScript
| PDF ]
- Robust Declassification
Proceedings of the 14th IEEE Computer Security
Foundations Workshop, Cape Breton, Nova Scotia, Canada, June 2001, pages 15–23. Steve
Zdancewic, Andrew C. Myers. [ PostScript ]
- Secure Information Flow and CPS
Proceedings of the 10th European Symposium on Programming, Genova, Italy, April
2001, pages 46–61. Steve Zdancewic, Andrew C. Myers.
- Protecting Privacy using the Decentralized Label Model
ACM Transactions on Software Engineering and Methodology, 9(4):410–442, October 2000. Andrew C. Myers, Barbara Liskov
[ PostScript | PDF ]
- JFlow: Practical Mostly-Static Information
Flow Control
Proceedings of the 26th ACM Symposium
on Principles of Programming Languages (POPL), San Antonio, Texas, January
1999,
pages 228–241. Andrew C. Myers.
[
PostScript | PDF ]
- Complete, Safe Information Flow with Decentralized Labels
Proceedings of the 1998 IEEE
Symposium on Security and Privacy, Oakland, California, May 1998, pages 186–197.
Andrew C. Myers, Barbara Liskov. [ PostScript | PDF ]
The slides from the conference presentation are also available [PostScript]
- A Decentralized Model for Information Flow
Control.
Proceedings of the 16th ACM Symposium on
Operating Systems Principles (SOSP), Saint-Malo, France,
October 1997, pages 129–142. Andrew C. Myers, Barbara Liskov.
The slides from the conference presentation are also available [PostScript]
- Hybrid Adaptive Caching for Distributed
Storage Systems.
Proceedings of the 16th ACM Symposium on
Operating Systems Principles (SOSP), Saint-Malo, France, October
1997, pages 102–115.
Miguel Castro, Atul Adya, Barbara Liskov, Andrew C. Myers.
- Parameterized
Types for Java
Proceedings of the 24th ACM Symposium on
Principles of Programming Languages (POPL), pages 132–145,
Paris, France, January 1997.
Andrew C. Myers, Joseph A. Bank, Barbara Liskov.
The slides from the conference presentation are also available [PostScript] [PolyJ
web site]
- Safe and Efficient Sharing of Persistent Objects in
Thor
Proceedings of SIGMOD, Montreal, Canada, June 1996. ACM SIGMOD Record 25(2):318–329.
B. Liskov, A. Adya, M. Castro, M. Day, R. Gruber, U. Maheshwari, A.C. Myers, L. Shrira.
- Bidirectional Object Layout for Separate
Compilation
Proceedings of the 10th ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications
(OOPSLA'95), Austin, Texas, October 1995. ACM SIGPLAN
Notices 30(10):124–139. Andrew C. Myers.
The slides from the conference presentation
are also available.
- Subtypes vs. Where Clauses: Constraining Parametric
Polymorphism
Proceedings of the 10th ACM Conference on Object-Oriented Programming Languages, Systems, Languages, and Applications
(OOPSLA'95), Austin, Texas, October 1995. ACM SIGPLAN
Notices 30(10):156–168. Mark Day, Robert Gruber, Barbara Liskov, Andrew C. Myers.
[ PS ]
- A Meta-Object Protocol for Parameterized Types
OOPSLA '94 Multi-Language Object Models Workshop, Portland, Oregon, October 1994. Andrew
C. Myers.
- The Language-Independent Interface of the Thor
Persistent Object System
In Object-Oriented Multidatabase Systems (O. Bukhres and A. Elmagarmid, eds.)
Prentice-Hall, 1994, pages 570–584. B. Liskov, M. Day, S. Ghemawat, R. Gruber, U. Maheshwari, A.C. Myers,
L. Shrira.
- References to Remote Mobile Objects in Thor
ACM Letters on Programming Languages and Systems, March 1994. M. Day, B. Liskov, U.
Maheshwari, A.C. Myers.
- Resolving the Integrity–Performance Conflict
Proceedings of the Fourth Workshop on Workstation Operating Systems
(now HotOS),
Napa Valley, California, October 1993, pages 156–159. Andrew C. Myers.
- Pade-Laplace Method for Analysis of Fluorescence Intensity
Decay
Biophysical Journal,
Vol. 56, pages 79–93, July 1989. Zeljko Bajzer, Andrew C. Myers, Salah S. Sedarous,
Franklyn G. Prendergast.
- Binding,
Internalization, and Intracellular Processing of Proteins Interacting with Recycling
Receptors: A Kinetic Analysis
(abstract)
Journal of Biological Chemistry,
264(23):13623–13631, 1989.
Zeljko Bajzer, Stanimir Vuk-Pavlovic, Andrew C. Myers.
- Binding,
Internalization, and Intracellular Processing of Protein Ligands: Derivation of Rate
Constants by Computer Modeling.
Journal of
Biological Chemistry, 262(14), pages 6494–6499, May 1987.
Andrew C. Myers, Stanimir Vuk-Pavlovic, John S. Kovach.
Technical Reports, Invited Papers, other Workshop Papers, etc.
-
Family Sharing and Object Evolution: Technical Report
Technical report, August 2007. Xin Qi and Andrew C. Myers.
-
Civitas: A Secure Remote Voting System
Cornell University Computing and Information Science Technical Report 2007-2081, May 2007.
Michael R. Clarkson, Stephen Chong, Andrew C. Myers.
[ Civitas web site ]
-
Mobility, Ubiquity and Security
Dagstuhl Seminar Proceedings 07091, February 2007.
G. Barthe, H. Mantel, P. Müller, A. C. Myers, A. Sabelfeld (Eds.)
-
Making Distributed Computation Trustworthy by Construction
Cornell University Computing and Information Science
Technical Report TR2006-2040, August 2006. Lantian Zheng, Andrew C. Myers.
-
Jif Reference Manual
Jif 3.0.0 Version, June 2006. Stephen Chong, Andrew C. Myers,
K. Vikram, Lantian Zheng.
-
Coercion-Resistant Remote Voting using
Decryption Mixes
Frontiers in
Electronic Elections, September 2005. Michael R. Clarkson,
Andrew C. Myers.
-
End-to-end Availability Policies and Noninterference.
Cornell University Computing and Information Science
Technical Report TR2005-1987, 2005. Lantian Zheng, Andrew C. Myers.
-
Programming with Explicit Security Policies
Proceedings of the European Symposium on Programming, pages 1–4,
April 2005. Invited talk [ slides ].
Andrew C. Myers.
-
Scalable Extensibility via Nested Inheritance
Cornell University Computing and Information Science Technical Report 2004-1940,
June 2004. Nathaniel Nystrom, Stephen Chong, Andrew C. Myers.
- Dynamic Security Labels and Noninterference
Cornell University Computing and Information Science Technical Report 2004-1924,
January 2004. Lantian Zheng, Andrew C. Myers.
- JMatch: Java plus Pattern Matching
Cornell University Computer Science Technical Report TR2002-1878, October 2002.
Jed Liu, Andrew C. Myers
- Secure Program Partitioning
Cornell University Computer Science Technical Report TR2001-1846,
October 2001. Steve Zdancewic, Lantian Zheng, Nathaniel Nystrom, Andrew C.
Myers [ PostScript | PDF ]
- Confidentiality and
Integrity with Untrusted Hosts: Technical Report
Cornell University Computer Science Technical Report TR2000-1810, August
2000. Steve Zdancewic, Andrew C. Myers [ PostScript | PDF ]
- Mostly-Static Decentralized Information Flow
Control
PhD thesis, Massachusetts Institute of Technology, January 1999. Technical Report
MIT/LCS/TR-783. Andrew C. Myers.
Recipient of the George M. Sprowls Award for outstanding Ph.D. thesis in the MIT EECS
Department [ PostScript | PDF ]
- ALSO: A Language for Extensible
Multi-user Systems
Proceedings of the 1996 MIT Student Workshop on Scalable Computing, August 1996. Andrew C.
Myers.
- Parameterized Types
and Java
Technical Memo MIT/LCS/TM-553.
MIT Laboratory for Computer Science. June 1996. Joseph A. Bank, Barbara Liskov, Andrew C.
Myers.
- Efficient Implementation of Parameterized Types Despite Subtyping
Thor Design Note 9.
MIT Laboratory for Computer Science, Programming Methodology Group.
June 1994. Andrew C. Myers, Barbara Liskov.
- Fast Object Operations in a
Persistent Programming System
Technical Report MIT/LCS/TR-599. MIT Laboratory for Computer Science, MA, January 1994.
Andrew C. Myers. Master's thesis.
Supervised Ph.D. Theses
Citing these papers
To provide a URL citation for one of these documents, please use
http://www.cs.cornell.edu/andru/pubs.html
Viewing these papers
Older documents are available in gzipped PostScript; newer ones in PDF.
These days it is pretty easy to convert between the formats. If you are using Windows,
you may need a PostScript previewer; a good previewer for Windows is
GSview. Several slide
sets are generated by PowerPoint on Windows NT, which unfortunately
produces rather bad PostScript (sorry). Some documents are also
available in HTML.
Distributing these papers
The papers distributed here have been provided by the contributing
authors as a means to ensure timely dissemination of scholarly
and technical work on a noncommercial basis. Copyright and all
rights therein are maintained by the authors or by other copyright
holders, notwithstanding that they have offered their works here
electronically. It is understood that all persons copying this
information will adhere to the terms and constraints invoked by each
author's copyright. These works may not be reposted without the
explicit permission of the copyright holder.