PLAS provides a forum for exploring and evaluating the use of programming language and program analysis techniques for promoting security in the complete range of software systems, from compilers to machine-learned models and smart contracts. The workshop encourages proposals of new, speculative ideas, evaluations of new or known techniques in practical settings, and discussions of emerging threats and problems. We also host position papers that are radical, forward-looking, and lead to lively and insightful discussions influential to the future research at the intersection of programming languages and security.
The scope of PLAS includes, but is not limited to:
|1:00PM ET/7:00PM CET||Opening remarks and invited talk (1 hour)|
|Deian Stefan - Look Ma no Hands, or How to Make Software Sandboxing Practical|
|break (10 minutes)|
|2:10PM ET/8:10PM CET||Session 1 - Information-flow control I (~40 minutes)|
|Xaver Fabian, Koby Wu Chan, Marco Patrignani - Short paper: Formal verification of Spectres combination|
|Farzaneh Derakhshan, Stephanie Balzer, Limin Jia - Short Paper: Noninterference For Session-Typed Processes|
|break (15 minutes)|
|3:05PM ET/9:05PM CET||Session 2 - Information-flow control II (~40 minutes)|
|Aslan Askarov - Short paper: are fine-grained and coarse-grained dynamic information flow control always equally expressive?|
|McKenna McCall, Abhishek Bichhawat, Limin Jia - Short Paper: Compositional Information Flow Monitoring for Reactive Programs|
|break (15 minutes)|
|4:00PM ET/10:00PM CET||Session 3 - Secure systems (~1 hour)|
|Priyanka Mondal, Maximilian Algehed, Owen Arden - Applying consensus and replication securely with FLAQR|
|Angel Luis Scull Pupo, Jens Nicolay, Elisa Gonzalez Boix - Short paper: A Datalog-based security monitoring language|
|5:00PM ET/11:00PM CET||Discussion and closing remarks (~10 minutes)|
Bio: Deian Stefan is an Assistant Professor of Computer Science and Engineering at UC San Diego, where he co-leads the Security and Programming Systems groups. Deian cofounded Intrinsic, a runtime security start-up acquired by VMWare in 2019. His research lies at the intersection of security and programming languages. He is particularly interested in building secure systems that are deployed in production.
We invite both short papers and long papers. For short papers, we especially encourage the submission of position papers that are likely to generate lively discussion as well as short papers covering ongoing and future work.
**NEW THIS YEAR** The workshop has no published workshop proceedings and there is no restriction on paper format other than the page limits stated above. Presenting a paper (either short or long) at the workshop does not preclude submission to or publication in other venues that are before, concurrent, or after the workshop. Papers presented at the workshop will be made available to workshop participants only.
Submissions can be made (in PDF format) via HotCRP here