Questions?

More documents

Recommendations

Info

CONTEXT FORMALIZATION CHANNELS, FLOWS AND LABELS WRAP-UP Information Flow Security: philosophy Problem: What about all those Android applications that ask for many privileges? Philosophy: trust and/or access control are not sufficient analyze/track information flows prevent data leaks and/or tempering G. Le Guernic DD2460 (III, L1): Information Flow Security 10/35
CONTEXT FORMALIZATION CHANNELS, FLOWS AND LABELS WRAP-UP Secure Information Flows Definition 2 (Secure Information Flows: confidentiality) A process is said to contain only secure information flows, wrt confidentiality, if and only if an attacker is unable to deduce information about the secret (hidden) data by looking only at the publicly observable (leaked) outputs of the process. private input public input program as a function : : output : ? ? ? ? ? ? G. Le Guernic DD2460 (III, L1): Information Flow Security 11/35
Page 1 and 2: Information Flow Security DD2460 So
Page 3 and 4: CONTEXT FORMALIZATION CHANNELS, FLO
Page 9: CONTEXT FORMALIZATION CHANNELS, FLO
Page 35: CONTEXT FORMALIZATION CHANNELS, FLO

Questions?

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?