The scope of PLAS includes, but is not limited to:

• *NEW THIS YEAR*: Language-based techniques for detecting and eliminating side-channel vulnerabilities
• Programming language techniques and verification applied to security in other domains (e.g. adversarial learning and smart contracts)
• Software isolation techniques (e.g., SFI and sandboxing) and compiler-based hardening techniques (e.g, secure compilation).
• Compiler-based security mechanisms (e.g. security type systems) or runtime-based security mechanisms (e.g. inline reference monitors)
• Techniques for discovering and detecting security vulnerabilities, including program (binary) analysis and fuzzing
• Automated introduction and/or verification of security enforcement mechanisms
• Language-based verification of security properties in software, including verification of cryptographic protocols
• Specifying and enforcing security policies for information flow and access control
• Model-driven approaches to security
• Security concerns for Web programming languages
• Language design for security in new domains such as cloud computing and IoT
• Applications, case studies, and implementations of these techniques