Dynamic enforcement of knowledge-based security policies

Proceedings - IEEE Computer Security Foundations Symposium

Volumn , Issue , 2011, Pages 114-128

  Mardziel, Piotr ^a   Magill, Stephen ^a   Hicks, Michael ^a   Srivatsa, Mudhakar ^b  

^a UNIVERSITY OF MARYLAND   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

abstract interpretation; knowledge based security; privacy; probabilistic polyhedron

Indexed keywords

KNOWLEDGE BASED SYSTEMS; MODEL CHECKING; PROBABILITY DISTRIBUTIONS; QUERY PROCESSING; SECURITY SYSTEMS;

ABSTRACT INTERPRETATIONS; ANONYMIZATION; KNOWLEDGE BASED; KNOWLEDGE-BASED SECURITY; PERFORMANCE; PRIVACY; PROBABILISTIC POLYHEDRON; PROBABILISTICS; SECRET DATA; SECURITY POLICY;

ABSTRACTING;

EID: 80052654881     PISSN: 19401434     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSF.2011.15     Document Type: Conference Paper

References (30)

1. "Facebook developers," http://developers.facebook.com/, 2011, see the policy and docs/guides/canvas directories for privacy information.
2. S. Guha, B. Cheng, and P. Francis, "Challenges in measuring online advertising systems," in IMC, 2010.
3. "Statement of rights and responsibilities," http://www.facebook.com/terms.php, Oct. 2010.
4. D. Worthington, "Myspace user data for sale," PC World on-line, Mar. 2010, http://www.pcworld.com/article/191716/myspace user data for sale.html.
5. S.-W. Seong, J. Seo, M. Nasielski, D. Sengupta, S. Hangal, S. K. Teh, R. Chu, B. Dodson, and M. S. Lam, "PrPl: a decentralized social networking infrastructure," in 1st International Workshop on Mobile Cloud Computing and Services: Social Networks and Beyond, Jun. 2010, invited Paper.
6. R. Baden, A. Bender, N. Spring, B. Bhattacharjee, and D. Starin, "Persona: an online social network with user-defined privacy," in SIGCOMM, 2009.
7. P. Golle, "Revisiting the uniqueness of simple demographics in the us population," in WPES, 2006.
8. "Facebook demographics and statistics report 2010," http://www.istrategylabs.com/2010/01/facebook-demographics-and-statistics- report-2010-145-growth-in-1-year/, 2010.
9. M. R. Clarkson, A. C. Myers, and F. B. Schneider, "Quantifying information flow with beliefs," J. Comput. Secur., vol. 17, no. 5, 2009.
10. A. Pfeffer, "The design and implementation of IBAL: A general-purpose probabilistic language," in Statistical Relational Learning, L. Getoor and B. Taskar, Eds. MIT Press, 2007.
11. A. Radul, "Report on the probabilistic language Scheme," in DLS, 2007.
12. S. Park, F. Pfenning, and S. Thrun, "A probabilistic language based on sampling functions," TOPLAS, vol. 31, pp. 4:1-4:46, 2008.
13. N. D. Goodman, V. K. Mansinghka, D. M. Roy, K. Bonawitz, and J. B. Tenenbaum, "Church: a language for generative models," in UAI, 2008.
14. O. Kiselyov and C.-C. Shan, "Embedded probabilistic programming,"in DSL, 2009.
15. P. Cousot and N. Halbwachs, "Automatic discovery of linear restraints among variables of a program," in POPL, 1978.
16. D. Monniaux, "Abstract interpretation of probabilistic semantics,"in Static Analysis Symposium (SAS'00), no. 1824, 200, pp. 322-339.
17. "PPL: The Parma polyhedral library," http://www.cs.unipr.it/ ppl/, 2011.
18. J. Loera, D. Haws, R. Hemmecke, P. Huggins, J. Tauzer, and R. Yoshida, "Latte," http://www.math.ucdavis.edu/latte/, 2008.
19. S. McCamant and M. D. Ernst, "Quantitative information flow as network flow capacity," in PLDI, 2008.
20. G. Smith, "On the foundations of quantitative information flow," in FOSSACS, 2009.
21. M. Backes, B. Köpf, and A. Rybalchenko, "Automatic discovery and quantification of information leaks," in Security and Privacy, 2009.
22. B. Köpf and A. Rybalchenko, "Approximation and randomization for quantitative information-flow analysis," in CSF, 2010.
23. V. Rastogi, M. Hay, G. Miklau, and D. Suciu, "Relationship privacy: output perturbation for queries with joins," in PODS, 2009.
24. C. Dwork, "A firm foundation for private data analysis,"Commun. ACM, vol. 54, pp. 86-95, Jan. 2011.
25. R. Bagnara, P. M. Hill, and E. Zaffanella, "Widening operators for powerset domains," Int. J. Softw. Tools Technol. Transf., vol. 8, pp. 449-466, 2006.
26. C. Popeea and W. Chin, "Inferring disjunctive postconditions, "in In ASIAN CS Conference, 2006.
27. P. Mardziel, S. Magill, M. Hicks, and M. Srivatsa, "Dynamic enforcement of knowledge-based security policies," University of Maryland Department of Computer Science, Tech. Rep. CS-TR-4978, Apr. 2011.
28. D. Clark, S. Hunt, and P. Malacaria, "Quantitative information flow, relations and polymorphic types," J. Log. and Comput., vol. 15, pp. 181-199, Apr. 2005. (Pubitemid 40860589)
29. C. Mu and D. Clark, "An interval-based abstraction for quantifying information flow," Electron. Notes Theor. Comput. Sci., vol. 253, pp. 119-141, November 2009.
30. D. Monniaux, "Analyse de programmes probabilistes par interprétation abstraite," Thèse de doctorat, Université Paris IX Dauphine, 2001, résumé étendu en fran cais. Contents in English.