Automated enforcement for relaxed information release with reference   points

doi:10.1007/s11432-014-5168-7

CORC > 北京大学 > 信息科学技术学院

	Automated enforcement for relaxed information release with reference points
	Sun Cong ; Xi Ning ; Gao Sheng ; Chen Zhong ; Ma JianFeng
刊名	science china information sciences
	2014
关键词	information flow security policy noninterference declassification pushdown system program analysis FLOW SECURITY MODEL DECLASSIFICATION POLICIES SYSTEMS
DOI	10.1007/s11432-014-5168-7
英文摘要	Language-based information flow security is a promising approach for enforcement of strong security and protection of the data confidentiality for the end-to-end communications. Here, noninterference is the standard and most restricted security property that completely forbids confidential data from being released to public context. Although this baseline property has been extensively enforced in various cases, there are still many programs, which are considered secure enough, violating this property in some way. In order to control the information release in these programs, the predetermined ways should be specified by means of which confidential data can be released. These intentional releases, also called declassifications, are regulated by several more relaxed security properties than noninterference. The security properties for controlled declassification have been developed on different dimensions with declassification goals. However, the mechanisms used to enforce these properties are still unaccommodating, unspecific, and insufficiently studied. In this work, a new security property, the Relaxed Release with Reference Points (R3P), is presented to limit the information that can be declassified in a program. Moreover, a new mechanism using reachability analysis has been proposed for the pushdown system to enforce R3P on programs. In order to show R3P is competent for use, it has been proved that it complies with the well-known prudent principles of declassification, and in addition finds some restrictions on our security policy. The widespread usage, precision, efficiency, and the influencing factors of our enforcement have been evaluated.; http://gateway.webofknowledge.com/gateway/Gateway.cgi?GWVersion=2&SrcApp=PARTNER_APP&SrcAuth=LinksAMR&KeyUT=WOS:000343081700018&DestLinkType=FullRecord&DestApp=ALL_WOS&UsrCustomerID=8e1609b174ce4e31116a60747a720701 ; Computer Science, Information Systems; SCI(E); EI; 1; ARTICLE; zhuyan@ustb.edu.cn; 11; 1-19; 57
语种	英语
内容类型	期刊论文
源URL	[http://ir.pku.edu.cn/handle/20.500.11897/207795]
专题	信息科学技术学院
推荐引用方式 GB/T 7714	Sun Cong,Xi Ning,Gao Sheng,et al. Automated enforcement for relaxed information release with reference points[J]. science china information sciences,2014.
APA	Sun Cong,Xi Ning,Gao Sheng,Chen Zhong,&Ma JianFeng.(2014).Automated enforcement for relaxed information release with reference points.science china information sciences.
MLA	Sun Cong,et al."Automated enforcement for relaxed information release with reference points".science china information sciences (2014).