JFlow: practical mostly-static information ow control (1999)

by Andrew C Myers
Venue:In Proceedings of the 26th ACM SIGPLAN-SIGACT on Principles of Programming Languages