Work

Quantifying Dynamic Leakage - Complexity Analysis and Model Counting-based Calculation -

Year: 2019
Type: article
Abstract: A program is non-interferent if it leaks no secret information to an observable output. However, non-interference is too strict in many practical cases and quantitative information flow (QIF) has been proposed and studied in depth. Originally, QIF is defined as the average of leakage amount of secret information over all executions of a program. However, a vulnerable program that has executions leaking the whole secret but has the small average leakage could be considered as secure. This counter-intuition raises a need for a new definition of information leakage of a particular run, i.e., dynamic leakage. As discussed in [5], entropy-based definitions do not work well for quantifying information leakage dynamically; Belief-based definition on the other hand is appropriate for deterministic programs, however, it is not appropriate for probabilistic ones.
Institution: Nagoya University
Language: English
Open Access status: diamond
OpenAlex ID: W2921284698
FWCI: 0.229
Cites: 29
Cited by: 2
Related to: 10