Stephen Chong

Cryptographic Enforcement of Language-Based Information Erasure

2015

Information erasure is a formal security requirement that stipulates when sensitive data must be removed from computer systems. In a system that correctly enforces erasure requirements, an attacker who observes the system after sensitive data …

Extensible access control with authorization contracts

2016

Existing programming language access control frameworks do not meet the needs of all software components. We propose an expressive framework for implementing access control monitors for components. The basis of the framework is a novel …