Alejandro Russo's publications

Conferences

1. Towards a Taint Mode for Cloud Computing Web Applications, with Luciano Bello. In ACM SIGPLAN Workshop on Programming Languages and Analysis for Security, Beijing, China, June 2012.
2. Disjunction Category Labels , with Deian Stefan, David Mazieres, John Mitchell. Nordic Conference in Secure IT Systems (NORDSEC 2011), LNCS, Tallinn, Estonia, 2011.
3. Flexible Dynamic Information Flow Control in Haskell , with Deian Stefan, John Mitchell, and David Mazieres. In ACM SIGPLAN Haskell Symposium 2011, Tokyo, Japan, September 2011. An extended version of the paper is also available.
4. Capabilities for information flow, with Arnar Birgisson and Andrei Sabelfeld. In ACM SIGPLAN Workshop on Programming Languages and Analysis for Security, San Jose, CA, June 2011.
5. Secure Multi-Execution in Haskell, with Mauro Jaskelioff. In Proceedings of Andrei Ershov International Conference on Perspectives of System Informatics (PSI'11), Akademgorodok, Novosibirsk, Russia, June 27-July 1, 2011. LNCS, Springer-Verlag.
6. Testing an Optimising Compiler by Generating Random Lambda Terms, with Michal Palka, Koen Claessen, and John Hughes. The 6th IEEE/ACM International Workshop on Automation of Software Test (AST 2011), Waikiki, Honolulu, Hawaii, 2011.

7. Implementing Erasure Policies Using Taint Analysis, with Filippo del Tedesco and David Sands. Nordic Conference in Secure IT Systems (NORDSEC 2010), LNCS, Espoo, Finland, 2010.

8. Unifying Facets of Information Integrity , with Arnar Birgisson and Andrei Sabelfeld. Sixth International Conference on Information Systems Security (ICISS 2010), Gandhinagar, Gujarat, India, 2010.

9. On-the-fly Inlining of Dynamic Security Monitors, with Jonas Magazinius and Andrei Sabelfeld. International Information Security Conference (SEC 2010), Brisbane, Australia, 2010.

10. A Taint Mode for Python via a Library , with Juan José Conti. OWASP AppSec Research 2010, Stockholm, June 21-24, Sweden, 2010. LNCS. To appear.
11. Dynamic vs. Static Flow-Sensitive Security Analysis, with Andrei Sabelfeld. In Proceedings of the IEEE Computer Security Foundations Symposium, Edinburgh, UK, July 17-19, 2010. IEEE Computer Society Press. ( Full version )
12. Tracking Information Flow in Dynamic Tree Structures , with Andrei Sabelfeld and Andrey Chudnov. In Proceedings of the European Symposium on Research in Computer Security (ESORICS), September 2009, LNCS, Springer-Verlag. ( extended version )
13. From dynamic to static and back: Riding the roller coaster of information-flow control research , with Andrei Sabelfeld. In Proceedings of Andrei Ershov International Conference on Perspectives of System Informatics (PSI'09), Akademgorodok, Novosibirsk, Russia, June 15-19, 2009. LNCS, Springer-Verlag.
14. Securing Timeout Instructions in Web Applications , with Andrei Sabelfeld. In Proceedings of the 22th IEEE Computer Security Foundations Symposium (CSF'09 ), Port Jefferson, New York, USA, July 8-10, 2009. IEEE Computer Society Press.
15. A Library for Light-weight Information-Flow Security in Haskell, with Koen Claessen and John Hughes. In Proceedings of the ACM SIGPLAN 2008 Haskell Symposium, Victoria, British Columbia, Canada, September 2008.

16. Security of Multithreaded Programs by Compilation , with Gilles Barth, Tamara Rezk, and Andrei Sabelfeld. In Proceedings of the 10th European Symposium on Research in Computer Security (ESORICS), Dresden, Germany, September 24-26, 2007, LNCS, Springer-Verlag, September 2007.

17. A Library for Secure Multi-threaded Information Flow in Haskell, with Tsa-chung Tsai, and John Hughes. In Proceedings of the 20th IEEE Computer Security Foundations Symposium, Venice, Italy, July 6-8, 2007. IEEE Computer Society Press. More here .

18. Closing Internal Timing Channels by Transformation , with Andrei Sabelfeld, John Hughes, and David Naumann. In Proceedings of the 11th Annual Asian Computing Science Conference, Tokyo, Japan, December 6-8, 2006. LNCS, Springer-Verlag.

19. Securing Interaction between Threads and the Scheduler, with Andrei Sabelfeld. In Proceedings of the 19th IEEE Computer Security Foundations Workshop, Venice, Italy, July 5-7, 2006. IEEE Computer Society Press.

20. Security for Multithreaded Programs under Cooperative Scheduling , with Andrei Sabelfeld. In Proceedings of Andrei Ershov International Conference on Perspectives of System Informatics, Akademgorodok, Novosibirsk, Russia, June 27-30, 2006. LNCS, Springer-Verlag.

    Journals

21. On-the-fly Inlining of Dynamic Security Monitors, with Jonas Magazinius and Andrei Sabelfeld. In Computers & Security, Elsevier, to appear.
22. Implicit flows in malicious and nonmalicious code , with Andrei Sabelfeld and Keqin Li. In Proceedings of the 2009 Marktoberdorf Summer School, IOS Press.
23. Securing Interaction between Threads and the Scheduler in the Presence of Synchronization , with Andrei Sabelfeld. In the Special Issue of Journal of Logic and Algebraic Programming dedicated to the Nordic Workshop on Programming Theory (NWPT'07), Elsevier Editorial.

24. Security of Multithreaded Programs By Compilation , with Gilles Barthe, Tamara Rezk, and Andrei Sabelfeld. In the ESORICS'07 Special Issue in ACM TISSEC.

Thesis

25. Language Support for Controlling Timing-Based Covert Channels , PhD Thesis, Alejandro Russo, Chalmers University of Technology, Sweden. November, 2008.
26. Controlling Timing Channels in Multithreaded Programs, Licentiate Thesis, Chalmers University of Technology, Technical Report no. 38L, ISSN 1652-876X, May 2007.

27. Principal Type Specialization of Dynamic Sum-Types, Final work to obtain the degree of Licentiate in Computer Science at Facultad de Ciencias Exactas, Ingeniería y Agrimensura (UNR), Rosario, Argentina. The prototype can be found here . An extension of the thesis with two new chapters can be found here .