Publications

2025

Johnny can’t revoke consent either: measuring compliance of consent revocation on the web
GP Kancherla, N Bielova, C Santos, A Bichhawat
Proceedings on Privacy Enhancing Technologies, 2025

How Usable is Consent Withdrawal on the Web? UI Requirements and Expert Evaluation
S Ahuja, GP Kancherla, CT Santos, N Bielova, A Bichhawat
HAL open science, 2025

Least Privilege Access for Persistent Storage Mechanisms in Web Browsers
GP Kancherla, D Goel, A Bichhawat
Proceedings of the ACM on Web Conference 2025, 2025

A Unified Browser-Based Consent Management Framework
GP Kancherla, A Bichhawat
47th International Conference on Software Engineering: New Ideas and Emerging Results (ICSE-NIER), 2025

On the Prevalence and Usage of Commit Signing on GitHub: A Longitudinal and Cross-Domain Study
A Sharma, S Karmakar, GP Kancherla, A Bichhawat
Evaluation and Assessment in Software Engineering (EASE) 2025, 2025

Worst-Case Response Time Analysis for Periodic Programs with Nested Locks
HM Ramolia, SS Kanawade, A Bichhawat
Proceedings of the 18th Innovations in Software Engineering Conference, 2025


2024

Online Authentication Habits of Indian Users
P Choudhary, S Das, MP Potta, P Das, A Bichhawat
2024 Conference on Building a Secure & Empowered Cyberspace (BuildSEC), 2024

Web Privacy Perceptions Amongst Indian Users
G Priyadarsini, A Saxena, A Dey, Prakriti, A Bichhawat
International Conference on Information Systems Security, 2024


2023

Towards Usable Security Analysis Tools for {Trigger-Action} Programming
McKenna McCall, Eric Zeng, Faysal Hossain Shezan, Mitchell Yang, Lujo Bauer, Abhishek Bichhawat, Camille Cobb, Limin Jia, Yuan Tian
Nineteenth Symposium on Usable Privacy and Security (SOUPS 2023), 2023

Layered Symbolic Security Analysis in
Karthikeyan Bhargavan, Abhishek Bichhawat, Pedram Hosseyni, Ralf Küsters, Klaas Pruiksma, Guido Schmitz, Clara Waldmann, Tim Würtele
European Symposium on Research in Computer Security, 2023

Tainted Secure Multi-Execution to Restrict Attacker Influence
MK McCall, A Bichhawat, L Jia
Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security, 2023


2022

Noise: A library of verified high-performance secure channel protocol implementations
S Ho, J Protzenko, A Bichhawat, K Bhargavan
2022 IEEE Symposium on Security and Privacy (SP), 2022

Compositional information flow monitoring for reactive programs
MK McCall, A Bichhawat, L Jia
2022 IEEE 7th European Symposium on Security and Privacy (EuroS&P), 2022


2021

DY*: A Modular Symbolic Verification Framework for Executable Cryptographic Protocol Code
Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf Küsters, Guido Schmitz, Tim Würtele
2021 IEEE European Symposium on Security and Privacy (EuroS&P), 2021

An in-depth symbolic security analysis of the ACME standard
Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf Küsters, Guido Schmitz, Tim Würtele
Proceedings of the 2021 ACM SIGSAC conference on computer and communications security, 2021

SAFETAP: An efficient incremental analyzer for trigger-action programs
McKenna McCall, Faysal Hossain Shezan, Abhishek Bichhawat, Camille Cobb, Limin Jia, Yuan Tian, Cooper Grace, Mitchell Yang
Carnegie Mellon University, 2021

Gradual security types and gradual guarantees
A Bichhawat, MK McCall, L Jia
2021 IEEE 34th Computer Security Foundations Symposium (CSF), 2021

A Tutorial-Style Introduction to DY*
Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf Küsters, Guido Schmitz, Tim Würtele
Protocols, Strands, and Logic: Essays Dedicated to Joshua Guttman on the Occasion of his 66.66 th Birthday, 2021

Permissive runtime information flow control in the presence of exceptions
A Bichhawat, V Rajani, D Garg, C Hammer
Journal of Computer Security 29 (4), 2021

DY⋆ Code Repository
Karthikeyan Bhargavan, Abhishek Bichhawat, Quoc Huy Do, Pedram Hosseyni, Ralf Küsters, Guido Schmitz, Tim Würtele
URL: https://github. com/reprosec/dolev-yao-star, 2021

Automating Audit with Policy Inference
A Bichhawat, M Fredrikson, J Yang
2021 IEEE 34th Computer Security Foundations Symposium (CSF), 2021


2020

Contextual and granular policy enforcement in database-backed applications
A Bichhawat, M Fredrikson, J Yang, A Trehan
Proceedings of the 15th ACM Asia Conference on Computer and Communications Security, 2020

First-order Gradual Information Flow Types with Gradual Guarantees
A Bichhawat, MK McCall, L Jia
arXiv preprint arXiv:2003.12819, 2020


2017

WebPol: Fine-grained information flow policies for web browsers
A Bichhawat, V Rajani, J Jain, D Garg, C Hammer European Symposium on Research in Computer Security, 2017

Practical dynamic information flow control
A Bichhawat Saarländische Universitäts-und Landesbibliothek, 2017


2015

Information flow control for event handling and the DOM in web browsers
V Rajani, A Bichhawat, D Garg, C Hammer
2015 IEEE 28th Computer Security Foundations Symposium, 2015

Post-dominator analysis for precisely handling implicit flows
A Bichhawat
IEEE/ACM 37th IEEE International Conference on Software Engineering, 2015


2014

Information flow control in WebKit’s JavaScript bytecode
A Bichhawat, V Rajani, D Garg, C Hammer
International conference on principles of security and trust, 2014

Generalizing permissive-upgrade in dynamic information flow analysis
A Bichhawat, V Rajani, D Garg, C Hammer
Proceedings of the Ninth Workshop on Programming Languages and Analysis for Security, 2014

Exception handling for dynamic information flow control
A Bichhawat Companion Proceedings of the 36th International Conference on Software …, 2014


2011

Security architecture for virtual machines
U Tupakula, V Varadharajan, A Bichhawat
International Conference on Algorithms and Architectures for Parallel …, 2011

Proactive Fault Tolerance Technique for a Mobile Grid Environment
A Bichhawat, RC Joshi
International Conference on Advances in Computing and Communication, 2011


2010

A survey on issues in mobile grid computing
A Bichhawat, RC Joshi
Int J Recent Trends Eng. Technol 4 (2), 2010


Misc.

Restricting Attacker Influence in Reactive Programs with Dynamic Secrets
MK McCall, A Bichhawat, L Jia
Carnegie Mellon University

Poster: Security in Web-Based Workflows
Thomas Bauereiß, Abhishek Bichhawat, Iulia Bolosteanu, Peter Faymonville, Bernd Finkbeiner, Deepak Garg, Richard Gay, Sergey Grebenshchikov, Christian Hammer, Dieter Hutter, Ondrej Kuncar, Peter Lammich, Heiko Mantel, Christian Müller, Andrei Popescu, Markus Rabe, Vineet Rajani, Helmut Seidl, Markus Tasch, Leander Tentrup

Status Report: Formal Analysis of Web Security
K Bhargavan, A Bichhawat, QH Do, D Fett, R Küsters, G Schmitz