{"id":"https://openalex.org/W2507797218","doi":"https://doi.org/10.1109/csf.2016.18","title":"On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks","display_name":"On Access Control, Capabilities, Their Equivalence, and Confused Deputy Attacks","publication_year":2016,"publication_date":"2016-06-01","ids":{"openalex":"https://openalex.org/W2507797218","doi":"https://doi.org/10.1109/csf.2016.18","mag":"2507797218"},"language":"en","primary_location":{"id":"doi:10.1109/csf.2016.18","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf.2016.18","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE 29th Computer Security Foundations Symposium (CSF)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://inria.hal.science/hal-01353963","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000593113","display_name":"Vineet Rajani","orcid":"https://orcid.org/0000-0001-7701-8311"},"institutions":[{"id":"https://openalex.org/I4210121786","display_name":"Max Planck Institute for Software Systems","ror":"https://ror.org/02pe2kf23","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210121786"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Vineet Rajani","raw_affiliation_strings":["MPI-SWS - Max Planck Institute for Software Systems (D-66111 Saarbr\u00fccken/D-67663 Kaiserslautern  - Germany)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MPI-SWS - Max Planck Institute for Software Systems (D-66111 Saarbr\u00fccken/D-67663 Kaiserslautern  - Germany)","institution_ids":["https://openalex.org/I4210121786"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026719321","display_name":"Deepak Garg","orcid":"https://orcid.org/0000-0002-0888-3093"},"institutions":[{"id":"https://openalex.org/I4210121786","display_name":"Max Planck Institute for Software Systems","ror":"https://ror.org/02pe2kf23","country_code":"DE","type":"facility","lineage":["https://openalex.org/I149899117","https://openalex.org/I4210121786"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Deepak Garg","raw_affiliation_strings":["MPI-SWS","MPI-SWS - Max Planck Institute for Software Systems (D-66111 Saarbr\u00fccken/D-67663 Kaiserslautern  - Germany)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"MPI-SWS","institution_ids":["https://openalex.org/I4210121786"]},{"raw_affiliation_string":"MPI-SWS - Max Planck Institute for Software Systems (D-66111 Saarbr\u00fccken/D-67663 Kaiserslautern  - Germany)","institution_ids":["https://openalex.org/I4210121786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087729716","display_name":"Tamara Rezk","orcid":"https://orcid.org/0000-0003-3744-0248"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Tamara Rezk","raw_affiliation_strings":["INRIA","INDES - Secure Diffuse Programming (2004, route des lucioles - BP 93 - 06902 Sophia Antipolis Cedex - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"INDES - Secure Diffuse Programming (2004, route des lucioles - BP 93 - 06902 Sophia Antipolis Cedex - France)","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":12,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"150","last_page":"163"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11986","display_name":"Scientific Computing and Data Management","score":0.9819999933242798,"subfield":{"id":"https://openalex.org/subfields/1802","display_name":"Information Systems and Management"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10772","display_name":"Distributed systems and fault tolerance","score":0.9799000024795532,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/enforcement","display_name":"Enforcement","score":0.7017623782157898},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6664711236953735},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.636355996131897},{"id":"https://openalex.org/keywords/relation","display_name":"Relation (database)","score":0.560849130153656},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5594547986984253},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.4988400936126709},{"id":"https://openalex.org/keywords/equivalence","display_name":"Equivalence (formal languages)","score":0.4729977250099182},{"id":"https://openalex.org/keywords/functional-equivalence","display_name":"Functional equivalence","score":0.4310763478279114},{"id":"https://openalex.org/keywords/semantics","display_name":"Semantics (computer science)","score":0.4214734733104706},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.33087414503097534},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.24285367131233215},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.17364659905433655},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.15532654523849487},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.10588327050209045},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.09954667091369629},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.09248483180999756},{"id":"https://openalex.org/keywords/linguistics","display_name":"Linguistics","score":0.08582282066345215}],"concepts":[{"id":"https://openalex.org/C2779777834","wikidata":"https://www.wikidata.org/wiki/Q4202277","display_name":"Enforcement","level":2,"score":0.7017623782157898},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6664711236953735},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.636355996131897},{"id":"https://openalex.org/C25343380","wikidata":"https://www.wikidata.org/wiki/Q277521","display_name":"Relation (database)","level":2,"score":0.560849130153656},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5594547986984253},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.4988400936126709},{"id":"https://openalex.org/C2780069185","wikidata":"https://www.wikidata.org/wiki/Q7977945","display_name":"Equivalence (formal languages)","level":2,"score":0.4729977250099182},{"id":"https://openalex.org/C2988012377","wikidata":"https://www.wikidata.org/wiki/Q29966452","display_name":"Functional equivalence","level":2,"score":0.4310763478279114},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.4214734733104706},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.33087414503097534},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.24285367131233215},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.17364659905433655},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.15532654523849487},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.10588327050209045},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.09954667091369629},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.09248483180999756},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.08582282066345215},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/csf.2016.18","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csf.2016.18","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2016 IEEE 29th Computer Security Foundations Symposium (CSF)","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-01353963v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01353963","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Security Foundations, Jun 2016, Lisbon, Portugal. ⟨10.1109/CSF.2016.18⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:kar.kent.ac.uk:90601","is_oa":false,"landing_page_url":"https://kar.kent.ac.uk/90601/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196264","display_name":"Kent Academic Repository (University of Kent)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I20581793","host_organization_name":"University of Kent","host_organization_lineage":["https://openalex.org/I20581793"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or workshop item"},{"id":"pmh:oai:pure.mpg.de:item_2420424","is_oa":false,"landing_page_url":"http://hdl.handle.net/11858/00-001M-0000-002C-F1EA-C","pdf_url":null,"source":{"id":"https://openalex.org/S4306400654","display_name":"MPG.PuRe (Max Planck Society)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I149899117","host_organization_name":"Max Planck Society","host_organization_lineage":["https://openalex.org/I149899117"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"CSF 2016","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:HAL:hal-01353963v1","is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01353963","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computer Security Foundations, Jun 2016, Lisbon, Portugal. ⟨10.1109/CSF.2016.18⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5727782928","display_name":"Analyses of JavaScript Applications: Certification and Security","funder_award_id":"ANR-14-CE28-0008","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":32,"referenced_works":["https://openalex.org/W132459671","https://openalex.org/W1502344315","https://openalex.org/W1520961854","https://openalex.org/W1594706025","https://openalex.org/W1774682829","https://openalex.org/W1977764760","https://openalex.org/W1990033340","https://openalex.org/W2033443995","https://openalex.org/W2037671236","https://openalex.org/W2044338429","https://openalex.org/W2056073317","https://openalex.org/W2058099999","https://openalex.org/W2063776463","https://openalex.org/W2095797338","https://openalex.org/W2096174010","https://openalex.org/W2105486904","https://openalex.org/W2122049982","https://openalex.org/W2140973326","https://openalex.org/W2141988808","https://openalex.org/W2142725511","https://openalex.org/W2157514610","https://openalex.org/W2158642393","https://openalex.org/W2175085668","https://openalex.org/W2361817505","https://openalex.org/W2400216756","https://openalex.org/W2505653653","https://openalex.org/W4211218509","https://openalex.org/W6638294888","https://openalex.org/W6664772730","https://openalex.org/W6674433254","https://openalex.org/W6683353623","https://openalex.org/W6712629026"],"related_works":["https://openalex.org/W3118866054","https://openalex.org/W2056882394","https://openalex.org/W2379789703","https://openalex.org/W2383806832","https://openalex.org/W2050092215","https://openalex.org/W2391201265","https://openalex.org/W2392210095","https://openalex.org/W2384861189","https://openalex.org/W2391858393","https://openalex.org/W2366800561"],"abstract_inverted_index":{"Motivated":[0],"by":[1],"the":[2,6,18,57,61,70,113],"problem":[3],"of":[4,20,63,74],"understanding":[5],"difference":[7],"between":[8],"practical":[9],"access":[10,30],"control":[11,31],"and":[12,33,80,110],"capability":[13],"systems":[14,32],"formally,":[15],"we":[16,68,100,121],"distill":[17],"essence":[19],"both":[21],"in":[22,76],"a":[23,77],"language-based":[24,78],"setting.":[25],"We":[26,39,89],"first":[27,71],"prove":[28,111],"that":[29,112],"(object)":[34],"capabilities":[35,42,94,107],"are":[36,115],"fundamentally":[37],"different.":[38],"further":[40],"study":[41],"as":[43,125],"an":[44],"enforcement":[45,128],"mechanism":[46],"for":[47,60],"confused":[48],"deputy":[49],"attacks":[50],"(CDAs),":[51],"since":[52],"CDAs":[53],"may":[54],"have":[55],"been":[56],"primary":[58],"motivation":[59],"invention":[62],"capabilities.":[64],"To":[65,117],"do":[66],"this,":[67],"develop":[69],"formal":[72],"characterization":[73],"CDA-freedom":[75,109,127],"setting":[79],"describe":[81],"its":[82],"relation":[83],"to":[84],"standard":[85],"information":[86],"flow":[87],"integrity.":[88],"show":[90],"that,":[91],"perhaps":[92],"suprisingly,":[93],"cannot":[95],"prevent":[96],"all":[97],"CDAs.":[98],"Next,":[99],"stipulate":[101],"restrictions":[102,114],"on":[103],"programs":[104],"under":[105],"which":[106],"ensure":[108],"sufficient.":[116],"relax":[118],"those":[119],"restrictions,":[120],"examine":[122],"provenance":[123],"semantics":[124],"sound":[126],"mechanisms.":[129]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}