Deian Stefan
where else to find them
what they talk about
all 7 in the filters
where they keep going back
- POPL3 editions2021–2023
all 8 in the filters
on a stage with
all 46 in the filters
who talks about the same things
- Conrad Watt12 talks
- Bryan Parno22 talks
- Marco Vassena8 talks
- Ranjit Jhala19 talks
- Nadia Polikarpova24 talks
- Deepak Garg18 talks
| title | conference | date |
|---|---|---|
| Mohabi: Disaggregating and Sandboxing the Firefox JavaScript Engine | 20th USENIX Symposium on Operating Systems Design and Implementation (OSDI '26) | 2026-07-13 |
Mohabi disaggregates SpiderMonkey from Firefox, adds wrapper types (e.g., split rooted wrapper, sandbox heap/stack/callbacks), and applies an external SFI… | ||
| Robust Constant-Time Cryptography | PLDI 2025 | 2025-06-16 |
Defines an operational semantics and a new property Robust Constant Time (RCT) that is parameterized by attacker models (read gadgets, speculative read… | ||
| Auditing Rust Crates Effectively | PriSC 2025 (with POPL 2025) | 2025-01-20 |
Cargo Scan is an interactive analysis tool that inspects Rust crates, models side-effecting APIs, and propagates color-checked propagation across call sites so… | ||
| Robust Constant-Time Cryptography | PriSC 2023 | 2023-01-21 |
Constant-time is insufficient: code that avoids secret-dependent branches still leaks when keys live in memory or the application misbehaves. The work defines… | ||
| Cachet: A Domain-Specific Language for Trustworthy Just-In-Time Compilers | PriSC 2023 | 2023-01-21 |
Cachet is a DSL that compiles Cachet to Boogie and C++ and encodes JIT invariants so the verifier proves generated code never violates them. The toolchain uses… | ||
| FaJITa: Verifying Optimizations on Just-In-Time Programs | PriSC 2023 | 2023-01-21 |
FaJITa is a translation validator that checks semantic equivalence of JavaScript functions after Firefox JIT optimizations by combining symbolic execution with… | ||
| MSWasm: Soundly Enforcing Memory-Safe Execution of Unsafe Code | POPL 2023 | 2023-01-15 |
Extends Wasm with segmented memory and unforgeable handles that carry colored provenance, a formal semantics, and a proof that well-typed MSWasm modules are… | ||
| Isolation without Taxation: Near-Zero-Cost Transitions for WebAssembly and SFI | POPL 2022 | 2022-01-16 |
Paper claims that adding static invariants lets sandboxed code use simple function calls instead of heavyweight wrappers, and implements this end-to-end. A… | ||
| STORM: Refinement Types for Secure Web Applications | 15th USENIX Symposium on Operating Systems Design and Implementation (OSDI '21) | 2021-07-14 |
Storm is a web framework that enforces data-dependent security policies at compile time via a Security Typed ORM that refines MVC types with logical… | ||
| Automatically Eliminating Speculative Leaks from Cryptographic Code with Blade | POPL 2021 | 2021-01-17 |
Blade automatically finds data-flow paths from memory reads that can speculatively carry secrets to cache-leaking sinks, models them with a transient vs stable… | ||
| Liquid Information Flow Control | ICFP 2020 | 2020-08-23 |
Claims a new DSL called Lifty domain-specific language that encodes information-flow policies as liquid refinements and enforces them with a TIO-style security… | ||
| Building Secure Systems in Haskell | Strange Loop 2016 | 2016-09-16 |
Claim: language-level information flow control enforces data policies everywhere so missed checks stop being vulnerabilities. Implementation uses LIO (a… | ||
| nothing matches | ||