A model of information flow control to determine whether malfunctions cause the privacy invasion.

David Evans, David M. Eyers, Jean Bacon

Browse the full EuroSys paper archive.