Quantitative analysis of secure information flow via probabilistic semantics

Proceedings - International Conference on Availability, Reliability and Security, ARES 2009

Volumn , Issue , 2009, Pages 49-57

  Mu, Chunyan ^a   Clark, David ^a  

^a KING'S COLLEGE LONDON   (United Kingdom)

Author keywords

Flow; Information theory; Language; Non interference; Security; Semantics

Indexed keywords

FLOW; GENERALIZED DISTRIBUTION; INFORMATION FLOWS; LANGUAGE; NON-INTERFERENCE; PROBABILISTIC SEMANTICS; QUANTITATIVE ANALYSIS; SECURE INFORMATION FLOW; SECURITY; SEMANTIC FUNCTIONS; SOFTWARE SYSTEMS;

DISTRIBUTION FUNCTIONS; INFORMATION THEORY; LINGUISTICS;

SEMANTICS;

EID: 70349662494     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ARES.2009.88     Document Type: Conference Paper

References (22)

1. Michele Boreale. Quantifying information leakage in process calculi.In ICALP (2), pages 119-131, 2006.
2. David Clark, Sebastian Hunt, and Pasquale Malacaria. Quantitative analysis of the leakage of confidential data. In Electronic Notes in Theoretical Computer Science, volume 59, 2002.
3. David Clark, Sebastian Hunt, and Pasquale Malacaria. Quantitative information flow, relations and polymorphic types. J. Log. and Comput., 15(2):181-199, 2005.
4. David Clark, Sebastian Hunt, and Pasquale Malacaria. A static analysis for quantifying information flow in a simple imperative language. Journal of Computer Security, 15:321-371, 2007.
5. Michael R. Clarkson, Andrew C. Myers, and Fred B. Schneider. Quantifying information flow with beliefs. Journal of Computer Security, 2007.
6. D. E. R. Denning. A lattice model of secure informatin flow. Communications of the ACM, 19(5):236-243, May 1976.
7. D. E. R. Denning. Cryptography and Data Security. Addison-Wesley, 1982.
8. J. Goguen and J. Meseguer. Security policies and security models. In IEEE Symposium on Security and privacy, pages 11-20. IEEE Computer Society Press, 1982.
9. James W. III Gray. Toward a mathematical foundation for informatin flow security. In IEEE Security and Privacy, pages 21-35, Oakland, California, 1991.
10. D. Kozen. Semantics of probabilistic programs. Journal of Computer and System Sciences, 22(3):328-350, 1981.
11. Gavin Lowe. Defining information flow quantity. Journal of Computer Security, 12(3-4):619-653, 2004.
12. Pasquale Malacaria. Assessing security threats of looping constructs. In Proceedings of the 34th annual ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 225-235, Nice, France, 2007. ACM Press.
13. John McLean. Security models and information flow. In Proceeding of the 1990 IEEE Symposium on Security and Privacy, Oakland, California, May 1990.
14. Jonathan Millen. Covert channel capacity. In Proceeding 1987 IEEE Symposium on Resarch in Security and Privacy. IEEE Computer Society Press, 1987.
15. David Monniaux. Abstract interpretation of probabilistic semantics. In SAS'00: Proceedings of the 7th International Symposium on Static Analysis, pages 322-339, London, UK, 2000. Springer-Verlag.
16. David Monniaux. Backwards abstract interpretation of probabilistic programs. In ESOP'01: Proceedings of the 10th European Symposium on Programming Languages and Systems, pages 367-382, London, UK,2001. Springer-Verlag.
17. Alessandra Di Pierro, Chris Hankin, and Herbert Wiklicky. Approximate non-interference. In CSFW, pages 3-17, 2002.
18. Alfred Renyi. On measures of entropy and information. In Proceedings of the 4th Berkeley Symposium on Mathematics, Statistics and Probability, pages 547-561, 1961.
19. Alfred Renyi. Probability theory. North-Holland Publishing Company, 1970.
20. Walter Rudin. Real and Complex Analysis. McGraw-Hill, 1966.
21. Douglas G. Weber. Quantitative hook-up security for covert channel analysis. In CSFW 1988, 1988.
22. J. Todd Wittbold and Dale M. Johnson. Information flow in nondeterministic systems. In IEEE Symposium on Security and Privacy, pages 144-161, 1990.