An empirical study of the strength of information flows in programs

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2006, Pages 73-79

  Masri, Wes ^a   Podgurski, Andy ^b  

^a AMERICAN UNIVERSITY OF BEIRUT   (Lebanon)

^b Case Western Reserve University   (United States)

Author keywords

correlation; dynamic information flow analysis; entropy; program dependence

Indexed keywords

CORRELATION; DYNAMIC DATA; DYNAMIC INFORMATION FLOW ANALYSIS; EMPIRICAL STUDIES; INFORMATION FLOWS; PROGRAM DEPENDENCE;

COMPUTER SOFTWARE;

DYNAMIC ANALYSIS;

EID: 67650787118     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1138912.1138927     Document Type: Conference Paper

References (18)

1. Binkley D. and Harman M. Analysis and Visualization of Predicate Dependence on Formal Parameters and Global Variables. IEEE TSE, 30(11): 715-735 (2004)
2. Clark D., Hunt S. and Malacaria P. Quantitative Analysis of the Leakage of Confidential Data. Proc. of Quantitative Aspects of Programming Languages, Sept. 2001 (QAPL'01).
3. Cover T. M. and Joy T. A. Elements of Information Theory. Wiley, 1991.
4. Denning D. E. A Lattice Model of Secure Information Flow. Comm. ACM, Vol. 19, No. 5 (May 1976), 236-242.
5. Denning D. E. Cryptography and Data Security. Addison-Wesley (June, 1982).
6. Denning D.E. and Denning P.J. Certification of programs for secure information flow. Communication of the ACM 20, 7 (1977), 504-513.
7. Fenton, J.S. Memoryless Subsystems. The Computer Journal 17, 2 (1974), 143-147.
8. Lampson, B.W. A Note on the Confinement Problem. Communication of the ACM 16, 10 (Oct. 1973), 613-615.
9. Leon, D., Masri W., Podgurski. A. An Empirical Evaluation of Test Case Filtering Techniques Based On Exercising Complex Information Flows. ICSE 2005 (St. Louis, MO, May'05).
10. Lieberherr, K.J. Controlling the Complexity of Software Designs. ICSE 2004 (Edinburgh, Scotland, May'04), 2-11.
11. Lowe G. Quantifying Information Flow. Proc. of the 15th IEEE Computer Security Foundations Workshop, pp 18-31.
12. Masri, W., Podgurski, A., and Leon, D. Detecting and Debugging Insecure Information Flows. 15th. IEEE International Symposium on Software Reliability Engineering, ISSRE 2004. St. Malo, France Nov 2-5, 2004.
13. Masri, W. Dynamic Information Flow Analysis, Slicing and Profiling. Ph.D. Dissertation, 2004, softlabnet.cwru.edu.
14. Masri, W., Podgurski, A. "Using Dynamic Information Flow Analysis to Detect Attacks against Applications". Software Engineering for Secure Systems. May'05, St. Louis, MO.
15. Podgurski A. and Clarke L. A Formal Model of Program Dependencies and its Implications for Software Testing, Debugging, and Maintenance. IEEE TSE, 16(9):965-979, Sept. 1990.
16. Podgurski A. Significance of program dependences for software testing, debugging and maintenance. Ph.D. Thesis. Computer Sc. Dept., U. of Mass., (Sept. 1989).
17. Sabelfeld A. and Myers A.C. Language-Based Information-Flow Security. IEEE Journal on Selected Areas in Communications, 21(1), Jan. 2003.
18. Steven S., Chandra, P., Fleck B., and Podgurski A. jRapture: a capture/replay tool for observation-based testing. ISSTA 2000 (Portland, Oregon, August 2000), 158-167.