<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01345131</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-21T10:21:37+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">Exploit Generation for Information Flow Leaks in Object-Oriented Programs</title>
            <author role="aut">
              <persName>
                <forename type="first">Quoc</forename>
                <forename type="middle">Huy</forename>
                <surname>Do</surname>
              </persName>
              <email type="md5">e1181734e15985ba4880b7a7a7eef063</email>
              <email type="domain">cs.tu-darmstadt.de</email>
              <idno type="idhal" notation="numeric">986174</idno>
              <idno type="halauthorid" notation="string">1046165-986174</idno>
              <affiliation ref="#struct-300723"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Richard</forename>
                <surname>Bubel</surname>
              </persName>
              <email type="md5">cb197b383f96a4175213e0b23c4559fd</email>
              <email type="domain">cs.tu-darmstadt.de</email>
              <idno type="idhal" notation="numeric">986175</idno>
              <idno type="halauthorid" notation="string">474162-986175</idno>
              <affiliation ref="#struct-300723"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Reiner</forename>
                <surname>Hähnle</surname>
              </persName>
              <email type="md5">a6e4f0989a362237a0d1cb4de05f49ac</email>
              <email type="domain">cs.tu-darmstadt.de</email>
              <idno type="idhal" notation="numeric">986105</idno>
              <idno type="halauthorid" notation="string">474163-986105</idno>
              <affiliation ref="#struct-300723"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2016-07-13 11:09:29</date>
              <date type="whenModified">2025-11-21 14:42:02</date>
              <date type="whenReleased">2016-07-13 11:18:41</date>
              <date type="whenProduced">2015-05-26</date>
              <date type="whenEndEmbargoed">2018-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01345131v1/document">
                <date notBefore="2018-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01345131v1/file/337885_1_En_27_Chapter.pdf" id="file-1345131-1425560">
                <date notBefore="2018-01-01"/>
              </ref>
              <ref type="externalLink" target="https://hal.inria.fr/hal-01345131/document"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01345131</idno>
            <idno type="halUri">https://inria.hal.science/hal-01345131</idno>
            <idno type="halBibtex">do:hal-01345131</idno>
            <idno type="halRefHtml">&lt;i&gt;30th IFIP International Information Security Conference (SEC)&lt;/i&gt;, May 2015, Hamburg, Germany. pp.401-415, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-319-18467-8_27"&gt;&amp;#x27E8;10.1007/978-3-319-18467-8_27&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">30th IFIP International Information Security Conference (SEC), May 2015, Hamburg, Germany. pp.401-415, &amp;#x27E8;10.1007/978-3-319-18467-8_27&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1345131-1425560"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-AICT" corresp="IFIP">IFIP Advances in Information and Communication Technology</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-TC11" corresp="IFIP-TC">IFIP TC11: Security and Privacy Protection in Information Processing Systems</idno>
            <idno type="stamp" n="IFIP-AICT-455" corresp="IFIP-AICT">ICT Systems Security and Privacy Protection</idno>
            <idno type="stamp" n="IFIP-SEC" corresp="IFIP"> International Information Security Conference</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 6: Software Security</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">Exploit Generation for Information Flow Leaks in Object-Oriented Programs</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Quoc</forename>
                    <forename type="middle">Huy</forename>
                    <surname>Do</surname>
                  </persName>
                  <email type="md5">e1181734e15985ba4880b7a7a7eef063</email>
                  <email type="domain">cs.tu-darmstadt.de</email>
                  <idno type="idhal" notation="numeric">986174</idno>
                  <idno type="halauthorid" notation="string">1046165-986174</idno>
                  <affiliation ref="#struct-300723"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Richard</forename>
                    <surname>Bubel</surname>
                  </persName>
                  <email type="md5">cb197b383f96a4175213e0b23c4559fd</email>
                  <email type="domain">cs.tu-darmstadt.de</email>
                  <idno type="idhal" notation="numeric">986175</idno>
                  <idno type="halauthorid" notation="string">474162-986175</idno>
                  <affiliation ref="#struct-300723"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Reiner</forename>
                    <surname>Hähnle</surname>
                  </persName>
                  <email type="md5">a6e4f0989a362237a0d1cb4de05f49ac</email>
                  <email type="domain">cs.tu-darmstadt.de</email>
                  <idno type="idhal" notation="numeric">986105</idno>
                  <idno type="halauthorid" notation="string">474163-986105</idno>
                  <affiliation ref="#struct-300723"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">IFIP Advances in Information and Communication Technology</title>
                <meeting>
                  <title>30th IFIP International Information Security Conference (SEC)</title>
                  <date type="start">2015-05-26</date>
                  <date type="end">2015-05-28</date>
                  <settlement>Hamburg</settlement>
                  <country key="DE">Germany</country>
                </meeting>
                <editor>Hannes Federrath</editor>
                <editor>Dieter Gollmann</editor>
                <imprint>
                  <biblScope unit="serie">ICT Systems Security and Privacy Protection</biblScope>
                  <biblScope unit="volume">AICT-455</biblScope>
                  <biblScope unit="pp">401-415</biblScope>
                  <date type="datePub">2015</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-319-18467-8_27</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">Information flow</term>
                <term xml:lang="en">Symbolic execution</term>
                <term xml:lang="en">Test generation</term>
              </keywords>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>We present a method to generate automatically exploits for information flow leaks in object-oriented programs. Our approach combines self-composition and symbolic execution to compose an insecurity formula for a given information flow policy and a specification of the security level of the program locations. The insecurity formula gives then rise to a model which is used to generate input data for the exploit.A prototype tool called KEG implementing the described approach for Java programs has been developed, which generates exploits as executable JUnit tests.</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 11</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-300723" status="VALID">
          <orgName>Technische Universität Darmstadt - Technical University of Darmstadt [Darmstadt]</orgName>
          <orgName type="acronym">TU Darmstadt</orgName>
          <desc>
            <address>
              <addrLine>Karolinenplatz 5, 64289 Darmstadt</addrLine>
              <country key="DE"/>
            </address>
            <ref type="url">http://www.tu-darmstadt.de/</ref>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>