Quantifying information flow in interactive systems

被引:3
|
作者
Mestel, David [1 ]
机构
[1] Univ Luxembourg, Luxembourg, Luxembourg
关键词
Quantified information flow; automata theory; NONINTERFERENCE; LEAKAGE;
D O I
10.1109/CSF.2019.00035
中图分类号
TP [自动化技术、计算机技术];
学科分类号
0812 ;
摘要
We consider the problem of quantifying information flow in interactive systems, modelled as finite-state transducers in the style of Goguen and Meseguer. Our main result is that if the system is deterministic then the information flow is either logarithmic or linear, and there is a polynomial-time algorithm to distinguish the two cases and compute the rate of logarithmic flow. To achieve this we first extend the theory of information leakage through channels to the case of interactive systems, and establish a number of results which greatly simplify computation. We then show that for deterministic systems the information flow corresponds to the growth rate of antichains inside a certain regular language, a property called the width of the language. In a companion work we have shown that there is a dichotomy between polynomial and exponential antichain growth, and a polynomial time algorithm to distinguish the two cases and to compute the order of polynomial growth. We observe that these two cases correspond to logarithmic and linear information flow respectively. Finally, we formulate several attractive open problems, covering the cases of probabilistic systems, systems with more than two users and nondeterministic systems where the nondeterminism is assumed to be innocent rather than demonic.
引用
收藏
页码:414 / 427
页数:14
相关论文
共 50 条
  • [1] Information Flow in Interactive Systems
    Alvim, Mario S.
    Andres, Miguel E.
    Palamidessi, Catuscia
    CONCUR 2010 - CONCURRENCY THEORY, 2010, 6269 : 102 - +
  • [2] Quantifying information flow in cryptographic systems
    Backes, Michael
    Koepf, Boris
    MATHEMATICAL STRUCTURES IN COMPUTER SCIENCE, 2015, 25 (02) : 457 - 479
  • [3] Quantitative information flow in interactive systems
    Alvim, Mario S.
    Andres, Miguel E.
    Palamidessi, Catuscia
    JOURNAL OF COMPUTER SECURITY, 2012, 20 (01) : 3 - 50
  • [4] Information flow security for interactive systems
    Jin, Y
    Liu, L
    Zheng, XJ
    EMBEDDED AND UBIQUITOUS COMPUTING - EUC 2005, 2005, 3824 : 1045 - 1054
  • [5] Quantifying probabilistic information flow in computational reactive systems
    Backes, M
    COMPUTER SECURITY - ESORICS 2005, PROCEEDINGS, 2005, 3679 : 336 - 354
  • [6] Compositional Information-flow Security for Interactive Systems
    Rafnsson, Willard
    Sabelfeld, Andrei
    2014 IEEE 27TH COMPUTER SECURITY FOUNDATIONS SYMPOSIUM (CSF), 2014, : 277 - 292
  • [7] Quantifying information flow
    Lowe, G
    15TH IEEE COMPUTER SECURITY FOUNDATION WORKSHOP, PROCEEDINGS, 2002, : 18 - 31
  • [8] Quantifying information flow with beliefs
    Clarkson, Michael R.
    Myers, Andrew C.
    Schneider, Fred B.
    JOURNAL OF COMPUTER SECURITY, 2009, 17 (05) : 655 - 701
  • [9] Quantifying Information Flow During Emergencies
    Liang Gao
    Chaoming Song
    Ziyou Gao
    Albert-László Barabási
    James P. Bagrow
    Dashun Wang
    Scientific Reports, 4
  • [10] Quantifying Information Flow for Dynamic Secrets
    Mardziel, Piotr
    Alvim, Mario S.
    Hicks, Michael
    Clarkson, Michael R.
    2014 IEEE SYMPOSIUM ON SECURITY AND PRIVACY (SP 2014), 2014, : 540 - 555