Reconciling belief and vulnerability in information flow

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2010, Pages 79-92

  Hamadou, Sardaouna ^a   Sassone, Vladimiro ^a   Palamidessi, Catuscia ^b  

^a UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

^b ÉCOLE POLYTECHNIQUE   (France)

Author keywords

Accuracy; Information flow; Information hiding; Quantitative and probabilistic models; Security; Uncertainty

Indexed keywords

INFORMATION FLOWS; MUTUAL INFORMATIONS; PROBABILISTIC MODELS; SHANNON ENTROPY;

SECURITY OF DATA;

EID: 77955207171     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2010.13     Document Type: Conference Paper

References (38)

1. Miguel Andrés, Catuscia Palmidessi, Peter van Rossum, and Geoffrey Smith. Computing the amount of leakage in information-hiding systems. Technical report, LIX, Ecole Polytechnique, 2009.
2. Mohit Bhargava and Catuscia Palamidessi. Probabilistic anonymity. In Martín Abadi and Luca de Alfaro, editors, Proceedings of CONCUR, volume 3653 of Lecture Notes in Computer Science, pages 171-185. Springer, 2005. http://www. lix.polytechnique.fr/~catuscia/papers/Anonymity/concur.pdf.
3. Christelle Braun, Konstantinos Chatzikokolakis, and Catuscia Palamidessi. Quantitative notions of leakage for one-try attacks. In Proceedings of the 25th Conference on Mathematical Foundations of Programming Semantics (MFPS 2009), volume 249 of Electronic Notes in Theoretical Computer Science, pages 75-91. Elsevier B.V., 2009.
4. Konstantinos Chatzikokolakis and Catuscia Palamidessi. Probable innocence revisited. Theoretical Computer Science, 367(1-2):123-138, 2006. http://www.lix.polytechnique. fr/~catuscia/papers/Anonymity/tcsPI.pdf.
5. Konstantinos Chatzikokolakis, Catuscia Palamidessi, and Prakash Panangaden. Anonymity protocols as noisy channels. Information and Computation, 206(2-4):378-401, 2008. http://www.lix.polytechnique.fr/~catuscia/papers/ Anonymity/Channels/full.pdf.
6. Konstantinos Chatzikokolakis, Catuscia Palamidessi, and Prakash Panangaden. Anonymity protocols as noisy channels. Inf. Comput., 206(2-4):378-401, 2008.
7. Konstantinos Chatzikokolakis, Catuscia Palamidessi, and Prakash Panangaden. On the bayes risk in information-hiding protocols. Journal of Computer Security, 16(5):531-571, 2008.
8. David Chaum. The dining cryptographers problem: Unconditional sender and recipient untraceability. Journal of Cryptology, 1:65-75, 1988.
9. David Clark, Sebastian Hunt, and Pasquale Malacaria. Quantitative analysis of the leakage of confidential data. Electr. Notes Theor. Comput. Sci., 59(3), 2001.
10. David Clark, Sebastian Hunt, and Pasquale Malacaria. Quantitative information flow, relations and polymorphic types. Journal of Logic and Computation, Special Issue on Lambdacalculus, type theory and natural language, 18(2):181-199, 2005.
11. David Clark, Sebastian Hunt, and Pasquale Malacaria. Quantitative information flow, relations and polymorphic types. J. Log. Comput., 15(2): 181-199, 2005.
12. David Clark, Sebastian Hunt, and Pasquale Malacaria. A static analysis for quantifying information flow in a simple imperative language. Journal of Computer Security, 15(3):321-371, 2007.
13. Ian Clarke, Oskar Sandberg, Brandon Wiley, and Theodore W. Hong. Freenet: A distributed anonymous information storage and retrieval system. In Designing Privacy Enhancing Technologies, International Workshop on Design Issues in Anonymity and Unobservability, volume 2009 of Lecture Notes in Computer Science, pages 44-66. Springer, 2000.
14. Michael R. Clarkson, Andrew C. Myers, and Fred B. Schneider. Belief in information flow. In CSFW, pages 31-45. IEEE Computer Society, 2005.
15. Michael R. Clarkson, Andrew C. Myers, and Fred B. Schneider. Quantifying information flow with beliefs. Journal of Computer Security, 2008. To appear. Available as Cornell Computer Science Department Technical Report TR 2007-207.
16. Thomas M. Cover and Joy A. Thomas. Elements of Information Theory. John Wiley & Sons, Inc., 1991.
17. Thomas M. Cover and Joy A. Thomas. Elements of Information Theory (Wiley Series in Telecommunications and Signal Processing). Wiley-Interscience, 2006.
18. Úlfar Erlingsson and Marco Pistoia, editors. Proceedings of the 2008 Workshop on Programming Languages and Analysis for Security, PIAS 2008, Tucson, AZ, USA, June 8, 2008. ACM, 2008.
19. Matthias Franz, Bernd Meyer, and Andreas Pashalidis. Attacking unlinkability: The importance of context. In Nikita Borisov and Philippe Golle, editors, Privacy Enhancing Technologies, 7th International Symposium, PET 2007 Ottawa, Canada, June 20-22, 2007, Revised Selected Papers, volume 4776 of Lecture Notes in Computer Science, pages 1-16. Springer, 2007.
20. Joseph Y. Halpern and Kevin R. O'Neill. Anonymity and information hiding in multiagent systems. Journal of Computer Security, 13(3):483-512, 2005.
21. S. Hamadou, C. Palamidessi, V. Sassone, and E. ElSalamouny. Probable Innocence in the presence of independent knowledge. In To appear in the Proc. of the sixth International Workshop on Formal Aspects in Security and Trust (FAST2009), LNCS. Spr.-Ver., 2009.
22. Dominic Hughes and Vitaly Shmatikov. Information hiding, anonymity and privacy: a modular approach. Journal of Computer Security, 12(1):3-36, 2004.
23. Boris Köpf and David A. Basin. An information-theoretic model for adaptive side-channel attacks. In Ning et al. [30], pages 286-296.
24. Pasquale Malacaria. Assessing security threats of looping constructs. In Martin Hofmann and Matthias Felleisen, editors, Proceedings of the 34th ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, POPL 2007, Nice, France, January 17-19, 2007, pages 225-235. ACM, 2007.
25. Pasquale Malacaria and Han Chen. Lagrange multipliers and maximum information leakage in different observational models. In Úlfar Erlingsson and Marco Pistoia, editor, Proceedings of the 2008 Workshop on Programming Languages and Analysis for Security (PIAS 2008), pages 135-146, Tucson, AZ, USA, June 8, 2008 2008. ACM.
26. Pasquale Malacaria and Han Chen. Lagrange multipliers and maximum information leakage in different observational models. In Erlingsson and Pistoia [18], pages 135-146.
27. James L. Massey. Guessing and entropy. In In Proceedings of the 1994 IEEE International Symposium on Information Theory, page 204, 1994.
28. Ira S. Moskowitz, Richard E. Newman, Daniel P. Crepeau, and Allen R. Miller. Covert channels and anonymizing networks. In Sushil Jajodia, Pierangela Samarati, and Paul F. Syverson, editors, WPES, pages 79-88. ACM, 2003.
29. Ira S. Moskowitz, Richard E. Newman, and Paul F. Syverson. Quasi-anonymous channels. In IASTED CNIS, pages 126-131, 2003.
30. Peng Ning, Sabrina De Capitani di Vimercati, and Paul F. Syverson, editors. Proceedings of the 2007 ACM Conference on Computer and Communications Security, CCS 2007, Alexandria, Virginia, USA, October 28-31, 2007. ACM, 2007.
31. Michael K. Reiter and Aviel D. Rubin. Crowds: anonymity for Web transactions. ACM Transactions on Information and System Security, 1(1):66-92, 1998.
32. Peter Y. Ryan and Steve Schneider. Modelling and Analysis of Security Protocols. Addison-Wesley, 2001.
33. Steve Schneider and Abraham Sidiropoulos. CSP and anonymity. In Proc. of the European Symposium on Research in Computer Security (ESORICS), volume 1146 of Lecture Notes in Computer Science, pages 198-218. Springer, 1996.
34. Geoffrey Smith. Adversaries and information leaks (tutorial). In Gilles Barthe and Cédric Fournet, editors, Proceedings of the Third Symposium on Trustworthy Global Computing, volume 4912 of Lecture Notes in Computer Science, pages 383-400. Springer, 2007.
35. Geoffrey Smith. On the foundations of quantitative information flow. In Luca De Alfaro, editor, Proceedings of the Twelfth International Conference on Foundations of Software Science and Computation Structures (FOSSACS 2009), volume 5504 of Lecture Notes in Computer Science, pages 288-302, York, UK, March 2009 2009. Springer.
36. Paul F. Syverson and Stuart G. Stubblebine. Group principals and the formalization of anonymity. In World Congress on Formal Methods (1), pages 814-833, 1999.
37. P.F. Syverson, D.M. Goldschlag, and M.G. Reed. Anonymous connections and onion routing. In IEEE Symposium on Security and Privacy, pages 44-54, Oakland, California, 1997.
38. Ye Zhu and Riccardo Bettati. Anonymity vs. information leakage in anonymity systems. In Proc. of ICDCS, pages 514-524. IEEE Computer Society, 2005.