Musard Balliu

According to our database, Musard Balliu authored at least 36 papers between 2009 and 2023.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2023

Challenges of Producing Software Bill of Materials for Java.

Musard Balliu, Benoit Baudry, Sofia Bobadilla, Mathias Ekstedt, Martin Monperrus, Javier Ron Arteaga, Aman Sharma, Gabriel Skoglund, César Soto-Valero, Martin Wittlinger

IEEE Secur. Priv., 2023

Disjunctive Policies for Database-Backed Programs.

Amir M. Ahmadian, Matvey Soloviev, Musard Balliu

CoRR, 2023

Unveiling the Invisible: Detection and Evaluation of Prototype Pollution Gadgets with Dynamic Taint Analysis.

Mikhail Shcherbakov, Paul Moosbrugger, Musard Balliu

CoRR, 2023

Security Properties through the Lens of Modal Logic.

Matvey Soloviev, Musard Balliu, Roberto Guanciale

CoRR, 2023

Challenges of Producing Software Bill Of Materials for Java.

Musard Balliu, Benoit Baudry, Sofia Bobadilla, Mathias Ekstedt, Martin Monperrus, Javier Ron, Aman Sharma, Gabriel Skoglund, César Soto-Valero, Martin Wittlinger

CoRR, 2023

Silent Spring: Prototype Pollution Leads to Remote Code Execution in Node.js.

Mikhail Shcherbakov, Musard Balliu, Cristian-Alexandru Staicu

Proceedings of the 32nd USENIX Security Symposium, 2023

Software Bill of Materials in Java.

Musard Balliu, Benoit Baudry, Sofia Bobadilla, Mathias Ekstedt, Martin Monperrus, Javier Ron, Aman Sharma, Gabriel Skoglund, César Soto-Valero, Martin Wittlinger

Proceedings of the 2023 Workshop on Software Supply Chain Offensive Research and Ecosystem Defenses, 2023

2022

Dynamic Policies Revisited.

Amir M. Ahmadian, Musard Balliu

Proceedings of the 7th IEEE European Symposium on Security and Privacy, 2022

2021

Friendly Fire: Cross-app Interactions in IoT Platforms.

Musard Balliu, Massimo Merro, Michele Pasqua, Mikhail Shcherbakov

ACM Trans. Priv. Secur., 2021

SandTrap: Securing JavaScript-driven Trigger-Action Platforms.

Mohammad M. Ahmadpanah, Daniel Hedin, Musard Balliu, Lars Eric Olsson, Andrei Sabelfeld

Proceedings of the 30th USENIX Security Symposium, 2021

Vivienne: Relational Verification of Cryptographic Implementations in WebAssembly.

Rodothea-Myrsini Tsoupidi, Musard Balliu, Benoit Baudry

Proceedings of the IEEE Secure Development Conference, 2021

Enclave-Based Secure Programming with JE.

Aditya Oak, Amir M. Ahmadian, Musard Balliu, Guido Salvaneschi

Proceedings of the IEEE Secure Development Conference, 2021

Security-Aware Multi-User Architecture for IoT.

Marcus Birgersson, Cyrille Artho, Musard Balliu

Proceedings of the 21st IEEE International Conference on Software Quality, 2021

SerialDetector: Principled and Practical Exploration of Object Injection Vulnerabilities for the Web.

Mikhail Shcherbakov, Musard Balliu

Proceedings of the 28th Annual Network and Distributed System Security Symposium, 2021

Language Support for Secure Software Development with Enclaves.

Aditya Oak, Amir M. Ahmadian, Musard Balliu, Guido Salvaneschi

Proceedings of the 34th IEEE Computer Security Foundations Symposium, 2021

Securing Node-RED Applications.

Mohammad M. Ahmadpanah, Musard Balliu, Daniel Hedin, Lars Eric Olsson, Andrei Sabelfeld

Proceedings of the Protocols, Strands, and Logic, 2021

2020

Clockwork: Tracking Remote Timing Attacks.

Iulia Bastys, Musard Balliu, Tamara Rezk, Andrei Sabelfeld

Proceedings of the 33rd IEEE Computer Security Foundations Symposium, 2020

InSpectre: Breaking and Fixing Microarchitectural Vulnerabilities by Formal Analysis.

Roberto Guanciale, Musard Balliu, Mads Dam

Proceedings of the CCS '20: 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020

2019

Securing IoT Apps.

Musard Balliu, Iulia Bastys, Andrei Sabelfeld

IEEE Secur. Priv., 2019

Flaws in Flows: Unveiling Design Flaws via Information Flow Analysis.

Katja Tuma, Riccardo Scandariato, Musard Balliu

Proceedings of the IEEE International Conference on Software Architecture, 2019

Information-Flow Control for Database-Backed Applications.

Marco Guarnieri, Musard Balliu, Daniel Schoepe, David A. Basin, Andrei Sabelfeld

Proceedings of the IEEE European Symposium on Security and Privacy, 2019

Securing Cross-App Interactions in IoT Platforms.

Musard Balliu, Massimo Merro, Michele Pasqua

Proceedings of the 32nd IEEE Computer Security Foundations Symposium, 2019

An Empirical Study of Information Flows in Real-World JavaScript.

Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld

Proceedings of the 14th ACM SIGSAC Workshop on Programming Languages and Analysis for Security, 2019

2018

If This Then What?: Controlling Flows in IoT Apps.

Iulia Bastys, Musard Balliu, Andrei Sabelfeld

Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018

2017

Formalising privacy policies in social networks.

Raúl Pardo, Musard Balliu, Gerardo Schneider

J. Log. Algebraic Methods Program., 2017

We Are Family: Relating Information-Flow Trackers.

Musard Balliu, Daniel Schoepe, Andrei Sabelfeld

Proceedings of the Computer Security - ESORICS 2017, 2017

2016

Explicit Secrecy: A Policy for Taint Tracking.

Daniel Schoepe, Musard Balliu, Benjamin C. Pierce, Andrei Sabelfeld

Proceedings of the IEEE European Symposium on Security and Privacy, 2016

Let's Face It: Faceted Values for Taint Tracking.

Daniel Schoepe, Musard Balliu, Frank Piessens, Andrei Sabelfeld

Proceedings of the Computer Security - ESORICS 2016, 2016

JSLINQ: Building Secure Applications across Tiers.

Musard Balliu, Benjamin Liebe, Daniel Schoepe, Andrei Sabelfeld

Proceedings of the Sixth ACM on Conference on Data and Application Security and Privacy, 2016

2014

Logics for Information Flow Security:From Specification to Verification.

Musard Balliu

PhD thesis, 2014

Automating Information Flow Analysis of Low Level Code.

Musard Balliu, Mads Dam, Roberto Guanciale

Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, 2014

2013

A Logic for Information Flow Analysis of Distributed Programs.

Musard Balliu

Proceedings of the Secure IT Systems - 18th Nordic Conference, 2013

2012

ENCoVer: Symbolic Exploration for Information Flow Security.

Musard Balliu, Mads Dam, Gurvan Le Guernic

Proceedings of the 25th IEEE Computer Security Foundations Symposium, 2012

2011

Epistemic temporal logic for information flow security.

Musard Balliu, Mads Dam, Gurvan Le Guernic

Proceedings of the 2011 Workshop on Programming Languages and Analysis for Security, 2011

2010

A Weakest Precondition Approach to Robustness.

Musard Balliu, Isabella Mastroeni

Trans. Comput. Sci., 2010

2009

A weakest precondition approach to active attacks analysis.

Musard Balliu, Isabella Mastroeni

Proceedings of the 2009 Workshop on Programming Languages and Analysis for Security, 2009