<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-01597759</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-20T23:08:20+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">SafeWeb: A Middleware for Securing Ruby-Based Web Applications</title>
            <author role="aut">
              <persName>
                <forename type="first">Petr</forename>
                <surname>Hosek</surname>
              </persName>
              <email type="md5">600bfc0f04ade3872ede3cc921844a9d</email>
              <email type="domain">doc.ic.ac.uk</email>
              <idno type="idhal" notation="numeric">1018148</idno>
              <idno type="halauthorid" notation="string">1231447-1018148</idno>
              <affiliation ref="#struct-69530"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Matteo</forename>
                <surname>Migliavacca</surname>
              </persName>
              <email type="md5">3e585dd83cd1f5543c84c0a155658d44</email>
              <email type="domain">doc.ic.ac.uk</email>
              <idno type="idhal" notation="numeric">1018149</idno>
              <idno type="halauthorid" notation="string">664713-1018149</idno>
              <affiliation ref="#struct-69530"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ioannis</forename>
                <surname>Papagiannis</surname>
              </persName>
              <email type="md5">5c7c368dede48813ee6e2195301c47fa</email>
              <email type="domain">doc.ic.ac.uk</email>
              <idno type="idhal" notation="numeric">1018150</idno>
              <idno type="halauthorid" notation="string">853240-1018150</idno>
              <affiliation ref="#struct-69530"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">David</forename>
                <forename type="middle">M.</forename>
                <surname>Eyers</surname>
              </persName>
              <email type="md5">ee7d275fe3b35a8dd5dc49dd22dcdd3f</email>
              <email type="domain">cs.otago.ac.nz</email>
              <idno type="idhal" notation="numeric">1003290</idno>
              <idno type="halauthorid" notation="string">1231448-1003290</idno>
              <affiliation ref="#struct-416928"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">David</forename>
                <surname>Evans</surname>
              </persName>
              <email type="md5">dff1306a6f0a5fca039924aa3cc479b4</email>
              <email type="domain">cl.cam.ac.uk</email>
              <idno type="idhal" notation="numeric">1018151</idno>
              <idno type="halauthorid" notation="string">182378-1018151</idno>
              <affiliation ref="#struct-237843"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Brian</forename>
                <surname>Shand</surname>
              </persName>
              <email type="md5">af8ae5abbba598659af4b5957de96aa4</email>
              <email type="domain">cbcu.nhs.uk</email>
              <idno type="idhal" notation="numeric">1018152</idno>
              <idno type="halauthorid" notation="string">853242-1018152</idno>
              <affiliation ref="#struct-263921"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Jean</forename>
                <surname>Bacon</surname>
              </persName>
              <email type="md5">7eddd86fc551b73da9a3bb15c2c892d2</email>
              <email type="domain">cl.cam.ac.uk</email>
              <idno type="idhal" notation="numeric">1018153</idno>
              <idno type="halauthorid" notation="string">853243-1018153</idno>
              <affiliation ref="#struct-237843"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Peter</forename>
                <surname>Pietzuch</surname>
              </persName>
              <email type="md5">4d89f6b574e2a02aa9e20386b3e02aa2</email>
              <email type="domain">doc.ic.ac.uk</email>
              <idno type="idhal" notation="numeric">978525</idno>
              <idno type="halauthorid" notation="string">853244-978525</idno>
              <affiliation ref="#struct-69530"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Hal</forename>
                <surname>Ifip</surname>
              </persName>
              <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
              <email type="domain">inria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2017-09-28 17:11:16</date>
              <date type="whenModified">2025-12-29 10:06:06</date>
              <date type="whenReleased">2017-09-28 17:16:54</date>
              <date type="whenProduced">2011-12-12</date>
              <date type="whenEndEmbargoed">2014-01-01</date>
              <ref type="file" target="https://inria.hal.science/hal-01597759v1/document">
                <date notBefore="2014-01-01"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-01597759v1/file/978-3-642-25821-3_25_Chapter.pdf" id="file-1597759-1648033">
                <date notBefore="2014-01-01"/>
              </ref>
              <ref type="externalLink" target="https://link.springer.com/content/pdf/10.1007%2F978-3-642-25821-3_25.pdf"/>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="200187">
                <persName>
                  <forename>Hal</forename>
                  <surname>Ifip</surname>
                </persName>
                <email type="md5">2073ac78024b6e13f2714db96e9b1e63</email>
                <email type="domain">inria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-01597759</idno>
            <idno type="halUri">https://inria.hal.science/hal-01597759</idno>
            <idno type="halBibtex">hosek:hal-01597759</idno>
            <idno type="halRefHtml">&lt;i&gt;12th International Middleware Conference (MIDDLEWARE)&lt;/i&gt;, Dec 2011, Lisbon, Portugal. pp.491-511, &lt;a target="_blank" href="https://dx.doi.org/10.1007/978-3-642-25821-3_25"&gt;&amp;#x27E8;10.1007/978-3-642-25821-3_25&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">12th International Middleware Conference (MIDDLEWARE), Dec 2011, Lisbon, Portugal. pp.491-511, &amp;#x27E8;10.1007/978-3-642-25821-3_25&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0 - Attribution<ref corresp="#file-1597759-1648033"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="IFIP-LNCS" corresp="IFIP">IFIP - Lecture Notes in Computer Science</idno>
            <idno type="stamp" n="IFIP">IFIP - International Federation for Information Processing</idno>
            <idno type="stamp" n="IFIP-TC" corresp="IFIP">IFIP Technical Committees </idno>
            <idno type="stamp" n="IFIP-WG" corresp="IFIP">Working Groups</idno>
            <idno type="stamp" n="IFIP-TC6" corresp="IFIP-TC">TC 6: Communication Systems</idno>
            <idno type="stamp" n="IFIP-WG6-1" corresp="IFIP-WG">Architectures and Protocols for Distributed Systems</idno>
            <idno type="stamp" n="IFIP-MIDDLEWARE">International Middleware Conference</idno>
            <idno type="stamp" n="IFIP-LNCS-7049" corresp="IFIP-LNCS">Middleware 2011</idno>
          </seriesStmt>
          <notesStmt>
            <note type="commentary">Part 9: Industry</note>
            <note type="audience" n="2">International</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">SafeWeb: A Middleware for Securing Ruby-Based Web Applications</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Petr</forename>
                    <surname>Hosek</surname>
                  </persName>
                  <email type="md5">600bfc0f04ade3872ede3cc921844a9d</email>
                  <email type="domain">doc.ic.ac.uk</email>
                  <idno type="idhal" notation="numeric">1018148</idno>
                  <idno type="halauthorid" notation="string">1231447-1018148</idno>
                  <affiliation ref="#struct-69530"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Matteo</forename>
                    <surname>Migliavacca</surname>
                  </persName>
                  <email type="md5">3e585dd83cd1f5543c84c0a155658d44</email>
                  <email type="domain">doc.ic.ac.uk</email>
                  <idno type="idhal" notation="numeric">1018149</idno>
                  <idno type="halauthorid" notation="string">664713-1018149</idno>
                  <affiliation ref="#struct-69530"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ioannis</forename>
                    <surname>Papagiannis</surname>
                  </persName>
                  <email type="md5">5c7c368dede48813ee6e2195301c47fa</email>
                  <email type="domain">doc.ic.ac.uk</email>
                  <idno type="idhal" notation="numeric">1018150</idno>
                  <idno type="halauthorid" notation="string">853240-1018150</idno>
                  <affiliation ref="#struct-69530"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">David</forename>
                    <forename type="middle">M.</forename>
                    <surname>Eyers</surname>
                  </persName>
                  <email type="md5">ee7d275fe3b35a8dd5dc49dd22dcdd3f</email>
                  <email type="domain">cs.otago.ac.nz</email>
                  <idno type="idhal" notation="numeric">1003290</idno>
                  <idno type="halauthorid" notation="string">1231448-1003290</idno>
                  <affiliation ref="#struct-416928"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">David</forename>
                    <surname>Evans</surname>
                  </persName>
                  <email type="md5">dff1306a6f0a5fca039924aa3cc479b4</email>
                  <email type="domain">cl.cam.ac.uk</email>
                  <idno type="idhal" notation="numeric">1018151</idno>
                  <idno type="halauthorid" notation="string">182378-1018151</idno>
                  <affiliation ref="#struct-237843"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Brian</forename>
                    <surname>Shand</surname>
                  </persName>
                  <email type="md5">af8ae5abbba598659af4b5957de96aa4</email>
                  <email type="domain">cbcu.nhs.uk</email>
                  <idno type="idhal" notation="numeric">1018152</idno>
                  <idno type="halauthorid" notation="string">853242-1018152</idno>
                  <affiliation ref="#struct-263921"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Jean</forename>
                    <surname>Bacon</surname>
                  </persName>
                  <email type="md5">7eddd86fc551b73da9a3bb15c2c892d2</email>
                  <email type="domain">cl.cam.ac.uk</email>
                  <idno type="idhal" notation="numeric">1018153</idno>
                  <idno type="halauthorid" notation="string">853243-1018153</idno>
                  <affiliation ref="#struct-237843"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Peter</forename>
                    <surname>Pietzuch</surname>
                  </persName>
                  <email type="md5">4d89f6b574e2a02aa9e20386b3e02aa2</email>
                  <email type="domain">doc.ic.ac.uk</email>
                  <idno type="idhal" notation="numeric">978525</idno>
                  <idno type="halauthorid" notation="string">853244-978525</idno>
                  <affiliation ref="#struct-69530"/>
                </author>
              </analytic>
              <monogr>
                <title level="m">Lecture Notes in Computer Science</title>
                <meeting>
                  <title>12th International Middleware Conference (MIDDLEWARE)</title>
                  <date type="start">2011-12-12</date>
                  <date type="end">2011-12-16</date>
                  <settlement>Lisbon</settlement>
                  <country key="PT">Portugal</country>
                </meeting>
                <editor>Fabio Kon</editor>
                <editor>Anne-Marie Kermarrec</editor>
                <imprint>
                  <publisher>Springer</publisher>
                  <biblScope unit="serie">Middleware 2011</biblScope>
                  <biblScope unit="volume">LNCS-7049</biblScope>
                  <biblScope unit="pp">491-511</biblScope>
                  <date type="datePub">2011</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1007/978-3-642-25821-3_25</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Web applications in many domains such as healthcare and finance must process sensitive data, while complying with legal policies regarding the release of different classes of data to different parties. Currently, software bugs may lead to irreversible disclosure of confidential data in multi-tier web applications. An open challenge is how developers can guarantee these web applications only ever release sensitive data to authorised users without costly, recurring security audits.Our solution is to provide a trusted middleware that acts as a “safety net” to event-based enterprise web applications by preventing harmful data disclosure before it happens. We describe the design and implementation of SafeWeb, a Ruby-based middleware that associates data with security labels and transparently tracks their propagation at different granularities across a multi-tier web architecture with storage and complex event processing. For efficiency, maintainability and ease-of-use, SafeWeb exploits the dynamic features of the Ruby programming language to achieve label propagation and data flow enforcement. We evaluate SafeWeb by reporting our experience of implementing a web-based cancer treatment application and deploying it as part of the UK National Health Service (NHS).</p>
            </abstract>
            <particDesc>
              <org type="consortium">TC 6</org>
              <org type="consortium">WG 6.1</org>
            </particDesc>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-69530" status="VALID">
          <idno type="ISNI">0000000121138111</idno>
          <idno type="ROR">https://ror.org/041kmwe10</idno>
          <orgName>Imperial College London</orgName>
          <date type="start">1907-01-01</date>
          <desc>
            <address>
              <addrLine>South Kensington Campus, London SW7 2AZ</addrLine>
              <country key="GB"/>
            </address>
            <ref type="url">http://www.imperial.ac.uk/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-416928" status="VALID">
          <idno type="IdRef">034371362</idno>
          <orgName>University of Otago [Dunedin, Nouvelle-Zélande]</orgName>
          <date type="start">1869</date>
          <desc>
            <address>
              <addrLine>362 Leith St, North Dunedin, Dunedin 9016, New-Zeland</addrLine>
              <country key="NZ"/>
            </address>
            <ref type="url">https://www.otago.ac.nz/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-237843" status="VALID">
          <idno type="IdRef">027706338</idno>
          <idno type="ROR">https://ror.org/013meh722</idno>
          <orgName>University of Cambridge [Cambridge, UK]</orgName>
          <orgName type="acronym">CAM</orgName>
          <desc>
            <address>
              <addrLine>The Old Schools, Trinity Lane, Cambridge CB2 1TN</addrLine>
              <country key="GB"/>
            </address>
            <ref type="url">http://www.cam.ac.uk/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-263921" status="INCOMING">
          <orgName>CBCU/ECRIC</orgName>
          <desc>
            <address>
              <country key="GB"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-362683" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-362683" status="INCOMING">
          <orgName>National Health Serivice</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>