Toby C. Murray

According to our database, Toby C. Murray authored at least 76 papers between 2007 and 2024.

Collaborative distances:

• Dijkstra number of four.
• Erdős number of four.

2024

Evict+Spec+Time: Exploiting Out-of-Order Execution to Improve Cache-Timing Attacks.

Shing Hing William Cheng, Chitchanok Chuengsatiansup, Daniel Genkin, Dallas McNeil, Toby Murray, Yuval Yarom, Zhiyuan Zhang

IACR Cryptol. ePrint Arch., 2024

Evaluating Program Repair with Semantic-Preserving Transformations: A Naturalness Assessment.

Thanh Le-Cong, Dat Nguyen, Bach Le, Toby Murray

CoRR, 2024

Symbol Correctness in Deep Neural Networks Containing Symbolic Layers.

Aaron Bembenek, Toby Murray

CoRR, 2024

Elephants Do Not Forget: Differential Privacy with State Continuity for Privacy Budget.

Jiankai Jin, Chitchanok Chuengsatiansup, Toby Murray, Benjamin I. P. Rubinstein, Yuval Yarom, Olga Ohrimenko

CoRR, 2024

EDEFuzz: A Web API Fuzzer for Excessive Data Exposures.

Lianglu Pan, Shaanan Cohney, Toby Murray, Van-Thuan Pham

Proceedings of the 46th IEEE/ACM International Conference on Software Engineering, 2024

2023

Proving the Absence of Microarchitectural Timing Channels.

Scott Buckley, Robert Sison, Nils Wistoff, Curtis Millar, Toby Murray, Gerwin Klein, Gernot Heiser

CoRR, 2023

Assume but Verify: Deductive Verification of Leaked Information in Concurrent Applications (Extended Version).

Toby Murray, Mukesh Tiwari, Gidon Ernst, David A. Naumann

CoRR, 2023

Detecting Excessive Data Exposures in Web Server Responses with Metamorphic Fuzzing.

Lianglu Pan, Shaanan Cohney, Toby Murray, Van-Thuan Pham

CoRR, 2023

Compositional Vulnerability Detection with Insecurity Separation Logic.

Toby Murray, Pengbo Yan, Gidon Ernst

Proceedings of the Formal Methods and Software Engineering, 2023

Beyond the Coverage Plateau: A Comprehensive Study of Fuzz Blockers (Registered Report).

Wentao Gao, Van-Thuan Pham, Dongge Liu, Oliver Chang, Toby Murray, Benjamin I. P. Rubinstein

Proceedings of the 2nd International Fuzzing Workshop, 2023

Formalising the Prevention of Microarchitectural Timing Channels by Operating Systems.

Robert Sison, Scott Buckley, Toby Murray, Gerwin Klein, Gernot Heiser

Proceedings of the Formal Methods - 25th International Symposium, 2023

Assume but Verify: Deductive Verification of Leaked Information in Concurrent Applications.

Toby Murray, Mukesh Tiwari, Gidon Ernst, David A. Naumann

Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023

2022

"Free" as in Freedom to Protest?

Fabio Massacci, Antonino Sabetta, Jelena Mirkovic, Toby Murray, Hamed Okhravi, Mohammad Mannan, Anderson Rocha, Eric Bodden, Daniel E. Geer

IEEE Secur. Priv., 2022

State Selection Algorithms and Their Impact on The Performance of Stateful Network Protocol Fuzzing.

Dongge Liu, Van-Thuan Pham, Gidon Ernst, Toby Murray, Benjamin I. P. Rubinstein

Proceedings of the IEEE International Conference on Software Analysis, 2022

A Hoare Logic with Regular Behavioral Specifications.

Gidon Ernst, Alexander Knapp, Toby Murray

Proceedings of the Leveraging Applications of Formal Methods, Verification and Validation. Verification Principles, 2022

2021

SecRSL: security separation logic for C11 release-acquire concurrency.

Pengbo Yan, Toby Murray

Proc. ACM Program. Lang., 2021

Verified secure compilation for mixed-sensitivity concurrent programs.

Robert Sison, Toby Murray

J. Funct. Program., 2021

Cogent: uniqueness types and certifying compilation.

Liam O'Connor, Zilin Chen, Christine Rizkallah, Vincent Jackson, Sidney Amani, Gerwin Klein, Toby Murray, Thomas Sewell, Gabriele Keller

J. Funct. Program., 2021

Information-flow control on ARM and POWER multicore processors.

Graeme Smith, Nicholas Coughlin, Toby Murray

Formal Methods Syst. Des., 2021

SecRSL: Security Separation Logic for C11 Release-Acquire Concurrency (Extended version with technical appendices).

Pengbo Yan, Toby Murray

CoRR, 2021

Deductive Verification via the Debug Adapter Protocol.

Gidon Ernst, Johannes Blau, Toby Murray

Proceedings of the 6th Workshop on Formal Integrated Development Environment, 2021

Incremental Vulnerability Detection via Back-Propagating Symbolic Execution of Insecurity Separation Logic.

Toby Murray, Pengbo Yan, Gidon Ernst

CoRR, 2021

Towards Systematic and Dynamic Task Allocation for Collaborative Parallel Fuzzing.

Van-Thuan Pham, Manh-Dung Nguyen, Quang-Trung Ta, Toby Murray, Benjamin I. P. Rubinstein

Proceedings of the 36th IEEE/ACM International Conference on Automated Software Engineering, 2021

2020

Towards Provable Timing-Channel Prevention.

Gernot Heiser, Toby Murray, Gerwin Klein

ACM SIGOPS Oper. Syst. Rev., 2020

An Under-Approximate Relational Logic: Heralding Logics of Insecurity, Incorrect Implementation & More.

Toby Murray

CoRR, 2020

VERONICA: Expressive and Precise Concurrent Information Flow Security (Extended Version with Technical Appendices).

Daniel Schoepe, Toby Murray, Andrei Sabelfeld

CoRR, 2020

An Under-Approximate Relational Logic.

Toby Murray

Arch. Formal Proofs, 2020

LEGION: Best-First Concolic Testing.

Dongge Liu, Gidon Ernst, Toby Murray, Benjamin I. P. Rubinstein

Proceedings of the 35th IEEE/ACM International Conference on Automated Software Engineering, 2020

Legion: Best-First Concolic Testing (Competition Contribution).

Dongge Liu, Gidon Ernst, Toby Murray, Benjamin I. P. Rubinstein

Proceedings of the Fundamental Approaches to Software Engineering, 2020

VERONICA: Expressive and Precise Concurrent Information Flow Security.

Daniel Schoepe, Toby Murray, Andrei Sabelfeld

Proceedings of the 33rd IEEE Computer Security Foundations Symposium, 2020

2019

Verifying That a Compiler Preserves Concurrent Value-Dependent Information-Flow Security.

Robert Sison, Toby Murray

Proceedings of the 10th International Conference on Interactive Theorem Proving, 2019

Can We Prove Time Protection?

Gernot Heiser, Gerwin Klein, Toby C. Murray

Proceedings of the Workshop on Hot Topics in Operating Systems, 2019

Value-Dependent Information-Flow Security on Weak Memory Models.

Graeme Smith, Nicholas Coughlin, Toby Murray

Proceedings of the Formal Methods - The Next 30 Years - Third World Congress, 2019

Empirically Analyzing Ethereum's Gas Mechanism.

Renlord Yang, Toby Murray, Paul Rimba, Udaya Parampalli

Proceedings of the 2019 IEEE European Symposium on Security and Privacy Workshops, 2019

SecCSL: Security Concurrent Separation Logic.

Gidon Ernst, Toby Murray

Proceedings of the Computer Aided Verification - 31st International Conference, 2019

2018

Formally verified software in the real world.

Gerwin Klein, June Andronick, Matthew Fernandez, Ihor Kuz, Toby C. Murray, Gernot Heiser

Commun. ACM, 2018

BP: Formal Proofs, the Fine Print and Side Effects.

Toby C. Murray, Paul C. van Oorschot

Proceedings of the 2018 IEEE Cybersecurity Development, SecDev 2018, Cambridge, MA, USA, 2018

In search of perfect users: towards understanding the usability of converged multi-level secure user interfaces.

Abdullah Issa, Toby Murray, Gidon Ernst

Proceedings of the 30th Australian Conference on Computer-Human Interaction, 2018

COVERN: A Logic for Compositional Verification of Information Flow Control.

Toby C. Murray, Robert Sison, Kai Engelhardt

Proceedings of the 2018 IEEE European Symposium on Security and Privacy, 2018

Abstract and Concrete Data Types vs Object Capabilities.

James Noble, Alex Potanin, Toby C. Murray, Mark S. Miller

Proceedings of the Principled Software Development, 2018

2017

Special issue on verified information flow security.

Toby C. Murray, Andrei Sabelfeld, Lujo Bauer

J. Comput. Secur., 2017

VST-Flow: Fine-grained low-level reasoning about real-world C code.

Samuel Grütter, Toby C. Murray

CoRR, 2017

Short Paper: Towards Information Flow Reasoning about Real-World C Code.

Samuel Grütter, Toby C. Murray

Proceedings of the 2017 Workshop on Programming Languages and Analysis for Security, 2017

2016

Eisbach: A Proof Method Language for Isabelle.

Daniel Matichuk, Toby C. Murray, Makarius Wenzel

J. Autom. Reason., 2016

COGENT: Certified Compilation for a Functional Systems Language.

Liam O'Connor, Christine Rizkallah, Zilin Chen, Sidney Amani, Japheth Lim, Yutaka Nagashima, Thomas Sewell, Alex Hixon, Gabriele Keller, Toby C. Murray, Gerwin Klein

CoRR, 2016

Compositional Security-Preserving Refinement for Concurrent Imperative Programs.

Toby C. Murray, Robert Sison, Edward Pierzchalski, Christine Rizkallah

Arch. Formal Proofs, 2016

A Dependent Security Type System for Concurrent Imperative Programs.

Toby C. Murray, Robert Sison, Edward Pierzchalski, Christine Rizkallah

Arch. Formal Proofs, 2016

A Framework for the Automatic Formal Verification of Refinement from Cogent to C.

Christine Rizkallah, Japheth Lim, Yutaka Nagashima, Thomas Sewell, Zilin Chen, Liam O'Connor, Toby C. Murray, Gabriele Keller, Gerwin Klein

Proceedings of the Interactive Theorem Proving - 7th International Conference, 2016

Refinement through restraint: bringing down the cost of verification.

Liam O'Connor, Zilin Chen, Christine Rizkallah, Sidney Amani, Japheth Lim, Toby C. Murray, Yutaka Nagashima, Thomas Sewell, Gerwin Klein

Proceedings of the 21st ACM SIGPLAN International Conference on Functional Programming, 2016

Permission and Authority Revisited towards a formalisation.

Sophia Drossopoulou, James Noble, Mark S. Miller, Toby C. Murray

Proceedings of the 18th Workshop on Formal Techniques for Java-like Programs, 2016

Compositional Verification and Refinement of Concurrent Value-Dependent Noninterference.

Toby C. Murray, Robert Sison, Edward Pierzchalski, Christine Rizkallah

Proceedings of the IEEE 29th Computer Security Foundations Symposium, 2016

PLAS'16: ACM SIGPLAN 11th Workshop on Programming Languages and Analysis for Security.

Toby C. Murray, Deian Stefan

Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security, 2016

CoGENT: Verifying High-Assurance File System Implementations.

Sidney Amani, Alex Hixon, Zilin Chen, Christine Rizkallah, Peter Chubb, Liam O'Connor, Joel Beeren, Yutaka Nagashima, Japheth Lim, Thomas Sewell, Joseph Tuong, Gabriele Keller, Toby C. Murray, Gerwin Klein, Gernot Heiser

Proceedings of the Twenty-First International Conference on Architectural Support for Programming Languages and Operating Systems, 2016

The cross domain desktop compositor: using hardware-based video compositing for a multi-level secure user interface.

Mark R. Beaumont, Jim McCarthy, Toby C. Murray

Proceedings of the 32nd Annual Conference on Computer Security Applications, 2016

2015

An empirical research agenda for understanding formal methods productivity.

D. Ross Jeffery, Mark Staples, June Andronick, Gerwin Klein, Toby C. Murray

Inf. Softw. Technol., 2015

Specifying a Realistic File System.

Sidney Amani, Toby C. Murray

Proceedings of the Proceedings Workshop on Models for Formal Analysis of Real Systems, 2015

Empirical Study Towards a Leading Indicator for Cost of Formal Software Verification.

Daniel Matichuk, Toby C. Murray, June Andronick, D. Ross Jeffery, Gerwin Klein, Mark Staples

Proceedings of the 37th IEEE/ACM International Conference on Software Engineering, 2015

Short Paper: On High-Assurance Information-Flow-Secure Programming Languages.

Toby C. Murray

Proceedings of the 10th ACM Workshop on Programming Languages and Analysis for Security, 2015

2014

Comprehensive formal verification of an OS microkernel.

Gerwin Klein, June Andronick, Kevin Elphinstone, Toby C. Murray, Thomas Sewell, Rafal Kolanski, Gernot Heiser

ACM Trans. Comput. Syst., 2014

File systems deserve verification too!

Gabriele Keller, Toby C. Murray, Sidney Amani, Liam O'Connor, Zilin Chen, Leonid Ryzhyk, Gerwin Klein, Gernot Heiser

ACM SIGOPS Oper. Syst. Rev., 2014

An Isabelle Proof Method Language.

Daniel Matichuk, Makarius Wenzel, Toby C. Murray

Proceedings of the Interactive Theorem Proving - 5th International Conference, 2014

Productivity for proof engineering.

Mark Staples, D. Ross Jeffery, June Andronick, Toby C. Murray, Gerwin Klein, Rafal Kolanski

Proceedings of the 2014 ACM-IEEE International Symposium on Empirical Software Engineering and Measurement, 2014

The Last Mile: An Empirical Study of Timing Channels on seL4.

David A. Cock, Qian Ge, Toby C. Murray, Gernot Heiser

Proceedings of the 2014 ACM SIGSAC Conference on Computer and Communications Security, 2014

2013

On the limits of refinement-testing for model-checking CSP.

Toby C. Murray

Formal Aspects Comput., 2013

seL4: From General Purpose to a Proof of Information Flow Enforcement.

Toby C. Murray, Daniel Matichuk, Matthew Brassil, Peter Gammie, Timothy Bourke, Sean Seefried, Corey Lewis, Xin Gao, Gerwin Klein

Proceedings of the 2013 IEEE Symposium on Security and Privacy, 2013

Formal specifications better than function points for code sizing.

Mark Staples, Rafal Kolanski, Gerwin Klein, Corey Lewis, June Andronick, Toby C. Murray, D. Ross Jeffery, Len Bass

Proceedings of the 35th International Conference on Software Engineering, 2013

2012

It's Time for Trustworthy Systems.

Gernot Heiser, Toby C. Murray, Gerwin Klein

IEEE Secur. Priv., 2012

Extensible Specifications for Automatic Re-use of Specifications and Proofs.

Daniel Matichuk, Toby C. Murray

Proceedings of the Software Engineering and Formal Methods - 10th International Conference, 2012

Noninterference for Operating System Kernels.

Toby C. Murray, Daniel Matichuk, Matthew Brassil, Peter Gammie, Gerwin Klein

Proceedings of the Certified Programs and Proofs - Second International Conference, 2012

2011

seL4 Enforces Integrity.

Thomas Sewell, Simon Winwood, Peter Gammie, Toby C. Murray, June Andronick, Gerwin Klein

Proceedings of the Interactive Theorem Proving - Second International Conference, 2011

Provable Security: How Feasible Is It?

Gerwin Klein, Toby C. Murray, Peter Gammie, Thomas Sewell, Simon Winwood

Proceedings of the 13th Workshop on Hot Topics in Operating Systems, 2011

2010

Analysing the security properties of object-capability patterns.

Toby C. Murray

PhD thesis, 2010

2009

Analysing the Information Flow Properties of Object-Capability Patterns.

Toby C. Murray, Gavin Lowe

Proceedings of the Formal Aspects in Security and Trust, 6th International Workshop, 2009

2008

Non-delegatable authorities in capability systems.

Toby C. Murray, Duncan A. Grove

J. Comput. Secur., 2008

On Refinement-Closed Security Properties and Nondeterministic Compositions.

Toby C. Murray, Gavin Lowe

Proceedings of the Eighth International Workshop on Automated Verification of Critical Systems, 2008

2007

An Overview of the Annex System.

Duncan A. Grove, Toby C. Murray, Chris A. Owen, Chris J. North, J. A. Jones, Mark R. Beaumont, Bradley D. Hopkins

Proceedings of the 23rd Annual Computer Security Applications Conference (ACSAC 2007), 2007