Defining an Information Flow Control Policy with Declassification and Countermeasures - DUMAS - Dépôt Universitaire de Mémoires Après Soutenance
Master Thesis Year : 2012

Defining an Information Flow Control Policy with Declassification and Countermeasures

Abstract

Information systems manage different types of data, commonly classified between public and secret data. The origin of some programs are not known by the final user, having the risk of executing a program and leaking some of the secret data. Information flow control serves to track how are the variables accessed and used in order to know if a program may leak a secret. Information flow policies define how information can flow, allowing no flow from secret to public variables in the case of the noninterference property or accepting certain flows in the case of information declassification. However, countermeasures are not considered at the level of defining a policy. This work intends to give a framework to accept countermeasures during the definition of a policy, improving its expressiveness. The proposals are formally defined in order to allow a future systematization of the security analysis.
Fichier principal
Vignette du fichier
Garcia_Cases.pdf (576.8 Ko) Télécharger le fichier
Loading...

Dates and versions

dumas-00725237 , version 1 (24-08-2012)

Identifiers

  • HAL Id : dumas-00725237 , version 1

Cite

Llorenç Garcia Cases. Defining an Information Flow Control Policy with Declassification and Countermeasures. Computation and Language [cs.CL]. 2012. ⟨dumas-00725237⟩
285 View
307 Download

Share

More