TU Darmstadt / ULB / TUbiblio

Combining Different Proof Techniques for Verifying Information Flow Security

Mantel, Heiko ; Sudbrock, Henning ; Krausser, Tina
Hrsg.: Puebla, Germán (2007)
Combining Different Proof Techniques for Verifying Information Flow Security.
Konferenzveröffentlichung, Bibliographie

Kurzbeschreibung (Abstract)

When giving a program access to secret information, one must ensure that the program does not leak the secrets to untrusted sinks. For reducing the complexity of such an information flow analysis, one can employ compositional proof techniques. In this article, we present a new approach to analyzing information flow security in a compositional manner. Instead of committing to a proof technique at the beginning of a verification, this choice is made during verification with the option of flexibly migrating to another proof technique. Our approachalso increases the precision of compositional reasoning in comparisonto the traditional approach. We illustrate the advantages in twoexemplary security analyses, on the semantic level and on thesyntactic level.

Typ des Eintrags: Konferenzveröffentlichung
Erschienen: 2007
Herausgeber: Puebla, Germán
Autor(en): Mantel, Heiko ; Sudbrock, Henning ; Krausser, Tina
Art des Eintrags: Bibliographie
Titel: Combining Different Proof Techniques for Verifying Information Flow Security
Sprache: Englisch
Publikationsjahr: 2007
Verlag: Springer
Buchtitel: 16th International Symposium on Logic Based Program Synthesis and Transformation, LOPSTR 2006
Reihe: LNCS
Band einer Reihe: 4407
Kurzbeschreibung (Abstract):

When giving a program access to secret information, one must ensure that the program does not leak the secrets to untrusted sinks. For reducing the complexity of such an information flow analysis, one can employ compositional proof techniques. In this article, we present a new approach to analyzing information flow security in a compositional manner. Instead of committing to a proof technique at the beginning of a verification, this choice is made during verification with the option of flexibly migrating to another proof technique. Our approachalso increases the precision of compositional reasoning in comparisonto the traditional approach. We illustrate the advantages in twoexemplary security analyses, on the semantic level and on thesyntactic level.

Fachbereich(e)/-gebiet(e): 20 Fachbereich Informatik
20 Fachbereich Informatik > Modellierung und Analyse von Informationssystemen (MAIS)
Hinterlegungsdatum: 31 Dez 2016 09:57
Letzte Änderung: 03 Jun 2018 21:30
PPN:
Export:
Suche nach Titel in: TUfind oder in Google
Frage zum Eintrag Frage zum Eintrag

Optionen (nur für Redakteure)
Redaktionelle Details anzeigen Redaktionelle Details anzeigen