Andrei Sabelfeld

ORCID

Publication Activity (10 Years)

Years Active: 1997-2024
Publications (10 Years): 57

Top Venues

CSF

J. Comput. Secur.

EuroS&P

USENIX Security Symposium

Publications

Eric Olsson, Benjamin Eriksson, Adam Doupé, Andrei Sabelfeld
Spider-Scents: Grey-box Database-aware Web Scanning for Stored XSS. USENIX Security Symposium (2024)
Eric Olsson, Benjamin Eriksson, Pablo Picazo-Sanchez, Lukas Andersson, Andrei Sabelfeld
FakeX: A Framework for Detecting Fake Reviews of Browser Extensions. AsiaCCS (2024)
Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld
LazyTAP: On-Demand Data Minimization for Trigger-Action Applications. SP (2023)
Mohammad M. Ahmadpanah, Daniel Hedin, Andrei Sabelfeld
Poster: Data Minimization by Construction for Trigger-Action Applications. CCS (2023)
Benjamin Eriksson, Amanda Stjerna, Riccardo De Masellis, Philipp Rümmer, Andrei Sabelfeld
Black Ostrich: Web Application Scanning with String Solvers. CCS (2023)
Yunang Chen, Mohannad Alhanahnah, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
Practical Data Access Minimization in Trigger-Action Platforms. USENIX Security Symposium (2022)
Benjamin Eriksson, Pablo Picazo-Sanchez, Andrei Sabelfeld
Hardening the security analysis of browser extensions. SAC (2022)
Iulia Bastys, Maximilian Algehed, Alexander Sjösten, Andrei Sabelfeld
SecWasm: Information Flow Control for WebAssembly. SAS (2022)
Pablo Picazo-Sanchez, Lara Ortiz-Martin, Gerardo Schneider, Andrei Sabelfeld
Are chrome extensions compliant with the spirit of least privilege? Int. J. Inf. Sec. 21 (6) (2022)
Pablo Picazo-Sanchez, Maximilian Algehed, Andrei Sabelfeld
DeDup.js: Discovering Malicious and Vulnerable Extensions by Detecting Duplication. ICISSP (2022)
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
CatNap: Leveraging Generic MPC for Actively Secure Privacy-enhancing Proximity Testing with a Napping Party. SECRYPT (2022)
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
Outsourcing MPC Precomputation for Location Privacy. EuroS&P Workshops (2022)
Pablo Picazo-Sanchez, Benjamin Eriksson, Andrei Sabelfeld
No Signal Left to Chance: Driving Browser Extension Analysis by Download Patterns. ACSAC (2022)
Mohammad M. Ahmadpanah, Musard Balliu, Daniel Hedin, Lars Eric Olsson, Andrei Sabelfeld
Securing Node-RED Applications. Protocols, Strands, and Logic (2021)
Benjamin Eriksson, Giancarlo Pellegrino, Andrei Sabelfeld
Black Widow: Blackbox Data-driven Web Scanning. IEEE Symposium on Security and Privacy (2021)
Yunang Chen, Amrita Roy Chowdhury, Ruizhe Wang, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
Data Privacy in Trigger-Action Systems. IEEE Symposium on Security and Privacy (2021)
Mohammad M. Ahmadpanah, Aslan Askarov, Andrei Sabelfeld
Nontransitive Policies Transpiled. EuroS&P (2021)
Mohammad M. Ahmadpanah, Daniel Hedin, Musard Balliu, Lars Eric Olsson, Andrei Sabelfeld
SandTrap: Securing JavaScript-driven Trigger-Action Platforms. USENIX Security Symposium (2021)
Alexander Sjösten, Daniel Hedin, Andrei Sabelfeld
EssentialFP: Exposing the Essence of Browser Fingerprinting. EuroS&P Workshops (2021)
Daniel Schoepe, Toby Murray, Andrei Sabelfeld
VERONICA: Expressive and Precise Concurrent Information Flow Security. CSF (2020)
Iulia Bastys, Musard Balliu, Tamara Rezk, Andrei Sabelfeld
Clockwork: Tracking Remote Timing Attacks. CSF (2020)
Daniel Schoepe, Toby Murray, Andrei Sabelfeld
VERONICA: Expressive and Precise Concurrent Information Flow Security (Extended Version with Technical Appendices). CoRR (2020)
Yunang Chen, Amrita Roy Chowdhury, Ruizhe Wang, Andrei Sabelfeld, Rahul Chatterjee, Earlence Fernandes
Data Privacy in Trigger-Action IoT Systems. CoRR (2020)
Pablo Picazo-Sanchez, Gerardo Schneider, Andrei Sabelfeld
HMAC and "Secure Preferences": Revisiting Chromium-Based Browsers Security. CANS (2020)
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
Where are you Bob? Privacy-Preserving Proximity Testing with a Napping Party. IACR Cryptol. ePrint Arch. 2020 (2020)
Benjamin Eriksson, Andrei Sabelfeld
AutoNav: Evaluation and Automatization of Web Navigation Policies. WWW (2020)
Ivan Oleynikov, Elena Pagnin, Andrei Sabelfeld
Where Are You Bob? Privacy-Preserving Proximity Testing with a Napping Party. ESORICS (1) (2020)
Benjamin Eriksson, Jonas Groth, Andrei Sabelfeld
On the Road with Third-party Apps: Security Analysis of an In-vehicle App Platform. VEHITS (2019)
Elena Pagnin, Gunnar Gunnarsson, Pedram Talebi, Claudio Orlandi, Andrei Sabelfeld
TOPPool: Time-aware Optimized Privacy-Preserving Ridesharing. Proc. Priv. Enhancing Technol. 2019 (4) (2019)
Marco Guarnieri, Musard Balliu, Daniel Schoepe, David A. Basin, Andrei Sabelfeld
Information-Flow Control for Database-Backed Applications. EuroS&P (2019)
Musard Balliu, Iulia Bastys, Andrei Sabelfeld
Securing IoT Apps. IEEE Secur. Priv. 17 (5) (2019)
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
An Empirical Study of Information Flows in Real-World JavaScript. CoRR (2019)
Alexander Sjösten, Steven Van Acker, Pablo Picazo-Sanchez, Andrei Sabelfeld
Latex Gloves: Protecting Browser Extensions from Probing and Revelation Attacks. NDSS (2019)
Cristian-Alexandru Staicu, Daniel Schoepe, Musard Balliu, Michael Pradel, Andrei Sabelfeld
An Empirical Study of Information Flows in Real-World JavaScript. PLAS@CCS (2019)
Iulia Bastys, Musard Balliu, Andrei Sabelfeld
If This Then What?: Controlling Flows in IoT Apps. CCS (2018)
Per A. Hallgren, Ravi Kishore, Martín Ochoa, Andrei Sabelfeld
Assuring BetterTimes. J. Comput. Secur. 26 (4) (2018)
Alexander Sjösten, Daniel Hedin, Andrei Sabelfeld
Information Flow Tracking for Side-Effectful Libraries. FORTE (2018)
Iulia Bastys, Frank Piessens, Andrei Sabelfeld
Tracking Information Flow via Delayed Output - Addressing Privacy in IoT and Emailing Apps. NordSec (2018)
Iulia Bastys, Frank Piessens, Andrei Sabelfeld
Prudent Design Principles for Information Flow Control. PLAS@CCS (2018)
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
Raising the Bar: Evaluating Origin-wide Security Manifests. ACSAC (2018)
Musard Balliu, Daniel Schoepe, Andrei Sabelfeld
We Are Family: Relating Information-Flow Trackers. ESORICS (1) (2017)
Per A. Hallgren, Claudio Orlandi, Andrei Sabelfeld
PrivatePool: Privacy-Preserving Ridesharing. CSF (2017)
Toby C. Murray, Andrei Sabelfeld, Lujo Bauer
Special issue on verified information flow security. J. Comput. Secur. 25 (4-5) (2017)
Simonas Stirbys, Omar Abu Nabah, Per A. Hallgren, Andrei Sabelfeld
Privacy-Preserving Location-Proximity for Mobile Apps. PDP (2017)
Alexander Sjösten, Steven Van Acker, Andrei Sabelfeld
Discovering Browser Extensions via Web Accessible Resources. CODASPY (2017)
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
Measuring login webpage security. SAC (2017)
Daniel Hedin, Alexander Sjösten, Frank Piessens, Andrei Sabelfeld
A Principled Approach to Tracking Information Flow in the Presence of Libraries. POST (2017)
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
MaxPace: Speed-constrained location queries. CNS (2016)
Willard Rafnsson, Deepak Garg, Andrei Sabelfeld
Progress-Sensitive Security for SPARK. ESSoS (2016)
Daniel Schoepe, Musard Balliu, Frank Piessens, Andrei Sabelfeld
Let's Face It: Faceted Values for Taint Tracking. ESORICS (1) (2016)
Steven Van Acker, Andrei Sabelfeld
JavaScript Sandboxing: Isolating and Restricting Client-Side JavaScript. FOSAD (2016)
Ioannis Agadakos, Per A. Hallgren, Dimitrios Damopoulos, Andrei Sabelfeld, Georgios Portokalidis
Location-enhanced authentication using the IoT: because you cannot be in two places at once. ACSAC (2016)
Daniel Schoepe, Musard Balliu, Benjamin C. Pierce, Andrei Sabelfeld
Explicit Secrecy: A Policy for Taint Tracking. EuroS&P (2016)
Daniel Hedin, Luciano Bello, Andrei Sabelfeld
Information-flow security for JavaScript and its APIs. J. Comput. Secur. 24 (2) (2016)
Steven Van Acker, Daniel Hausknecht, Andrei Sabelfeld
Data Exfiltration in the Face of CSP. AsiaCCS (2016)
Musard Balliu, Benjamin Liebe, Daniel Schoepe, Andrei Sabelfeld
JSLINQ: Building Secure Applications across Tiers. CODASPY (2016)
Willard Rafnsson, Andrei Sabelfeld
Secure multi-execution: Fine-grained, declassification-aware, and transparent. J. Comput. Secur. 24 (1) (2016)
Daniel Hausknecht, Jonas Magazinius, Andrei Sabelfeld
May I? - Content Security Policy Endorsement for Browser Extensions. DIMVA (2015)
Luciano Bello, Daniel Hedin, Andrei Sabelfeld
Value Sensitivity and Observable Abstract Values for Information Flow Control. LPAR (2015)
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
InnerCircle: A parallelizable decentralized privacy-preserving location proximity protocol. PST (2015)
Daniel Hedin, Luciano Bello, Andrei Sabelfeld
Value-Sensitive Hybrid Information Flow Control for a JavaScript-Like Language. CSF (2015)
Daniel Schoepe, Andrei Sabelfeld
Understanding and Enforcing Opacity. CSF (2015)
Daniel Hedin, Andrei Sabelfeld
Web Application Security Using JSFlow. SYNASC (2015)
Per A. Hallgren, Martín Ochoa, Andrei Sabelfeld
BetterTimes - Privacy-Assured Outsourced Multiplications for Additively Homomorphic Encryption on Finite Fields. ProvSec (2015)
Steven Van Acker, Daniel Hausknecht, Wouter Joosen, Andrei Sabelfeld
Password Meters and Generators on the Web: From Large-Scale Empirical Study to Getting It Right. CODASPY (2015)
Willard Rafnsson, Andrei Sabelfeld
Compositional Information-Flow Security for Interactive Systems. CSF (2014)
Daniel Schoepe, Daniel Hedin, Andrei Sabelfeld
SeLINQ: tracking information across application-database boundaries. ICFP (2014)
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
Preface. J. Comput. Secur. 22 (4) (2014)
Jonas Magazinius, Daniel Hedin, Andrei Sabelfeld
Architectures for Inlining Security Monitors in Web Applications. ESSoS (2014)
Daniel Hedin, Arnar Birgisson, Luciano Bello, Andrei Sabelfeld
JSFlow: tracking information flow in JavaScript and its APIs. SAC (2014)
Per A. Hallgren, Daniel T. Mauritzson, Andrei Sabelfeld
GlassTube: a lightweight approach to web application integrity. PLAS (2013)
Willard Rafnsson, Keiko Nakata, Andrei Sabelfeld
Securing Class Initialization in Java-like Languages. IEEE Trans. Dependable Secur. Comput. 10 (1) (2013)
Willard Rafnsson, Andrei Sabelfeld
Secure Multi-execution: Fine-Grained, Declassification-Aware, and Transparent. CSF (2013)
Jonas Magazinius, Billy K. Rios, Andrei Sabelfeld
Polyglots: crossing origins by crossing formats. CCS (2013)
Lieven Desmet, Martin Johns, Benjamin Livshits, Andrei Sabelfeld
Web Application Security (Dagstuhl Seminar 12401). Dagstuhl Reports 2 (10) (2012)
Daniel Hedin, Andrei Sabelfeld
Information-Flow Security for a Core of JavaScript. CSF (2012)
Willard Rafnsson, Daniel Hedin, Andrei Sabelfeld
Securing Interactive Programs. CSF (2012)
Jonas Magazinius, Alejandro Russo, Andrei Sabelfeld
On-the-fly inlining of dynamic security monitors. Comput. Secur. 31 (7) (2012)
Arnar Birgisson, Daniel Hedin, Andrei Sabelfeld
Boosting the Permissiveness of Dynamic Information-Flow Tracking by Testing. ESORICS (2012)
Arnar Birgisson, Andrei Sabelfeld
Multi-run Security. ESORICS (2011)
Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld
Capabilities for information flow. PLAS (2011)
Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld
Decentralized Delimited Release. APLAS (2011)
Willard Rafnsson, Andrei Sabelfeld
Limiting information leakage in event-based communication. PLAS (2011)
Jonas Magazinius, Aslan Askarov, Andrei Sabelfeld
A lattice-based approach to mashup security. AsiaCCS (2010)
Arnar Birgisson, Alejandro Russo, Andrei Sabelfeld
Unifying Facets of Information Integrity. ICISS (2010)
Jonas Magazinius, Alejandro Russo, Andrei Sabelfeld
On-the-fly Inlining of Dynamic Security Monitors. SEC (2010)
Gilles Barthe, Tamara Rezk, Alejandro Russo, Andrei Sabelfeld
Security of multithreaded programs by compilation. ACM Trans. Inf. Syst. Secur. 13 (3) (2010)
Keiko Nakata, Andrei Sabelfeld
Securing Class Initialization. IFIPTM (2010)
Andrei Sabelfeld
Preface. J. Comput. Secur. 18 (6) (2010)
Alejandro Russo, Andrei Sabelfeld
Dynamic vs. Static Flow-Sensitive Security Analysis. CSF (2010)
Aslan Askarov, Andrei Sabelfeld
Tight Enforcement of Information-Release Policies for Dynamic Languages. CSF (2009)
Andrei Sabelfeld, David Sands
Declassification: Dimensions and principles. J. Comput. Secur. 17 (5) (2009)
Alejandro Russo, Andrei Sabelfeld, Andrey Chudnov
Tracking Information Flow in Dynamic Tree Structures. ESORICS (2009)
Aslan Askarov, Andrei Sabelfeld
Catch me if you can: permissive yet secure error handling. PLAS (2009)
Andrei Sabelfeld, Alejandro Russo
From Dynamic to Static and Back: Riding the Roller Coaster of Information-Flow Control Research. Ershov Memorial Conference (2009)
Alejandro Russo, Andrei Sabelfeld
Securing Timeout Instructions in Web Applications. CSF (2009)
Alejandro Russo, Andrei Sabelfeld
Securing interaction between threads and the scheduler in the presence of synchronization. J. Log. Algebraic Methods Program. 78 (7) (2009)
Aslan Askarov, Sebastian Hunt, Andrei Sabelfeld, David Sands
Termination-Insensitive Noninterference Leaks More Than Just a Bit. ESORICS (2008)
Aslan Askarov, Daniel Hedin, Andrei Sabelfeld
Cryptographically-masked flows. Theor. Comput. Sci. 402 (2-3) (2008)
Andrei Sabelfeld
Preface. J. Comput. Secur. 16 (5) (2008)

Andrei Sabelfeld.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Andrei Sabelfeld