Towards a Flow- and Path-Sensitive Information Flow Analysis
Towards a Flow- and Path-Sensitive Information Flow Analysis
复制标题
DOI：
10.1109/csf.2017.17
复制
发表时间：
2017-06
期刊：
影响因子：
--
通讯作者：
Peixuan Li;Danfeng Zhang
中科院分区：
文献类型：
--
作者：
Peixuan Li;Danfeng Zhang
本文研究了流动和路径敏感的静态信息流分析。与带有固定标签的安全类型系统相比，已经表明流动敏感类型系统接受更安全的程序。我们表明，带有固定标签的信息流分析可能既具有流动性和路径敏感性。新颖的分析有两个主要组成部分：1）通用程序转换，该程序可以消除混淆固定标签类型系统的程序中的错误数据流依赖项，以及2）固定标签类型的系统，该系统允许安全类型依赖路径状况。我们正式证明所提出的分析强制执行严格的安全属性：非干扰。此外，我们表明该分析比经典的流动敏感类型系统更为精确，并且可以在存在可变变量的情况下对信息流的声音控制，而无需诉诸于运行时机制。
This paper investigates a flow- and path-sensitive static information flow analysis. Compared with security type systems with fixed labels, it has been shown that flow-sensitive type systems accept more secure programs. We show that an information flow analysis with fixed labels can be both flow- and path-sensitive. The novel analysis has two major components: 1) a general-purpose program transformation that removes false dataflow dependencies in a program that confuse a fixed-label type system, and 2) a fixed-label type system that allows security types to depend on path conditions. We formally prove that the proposed analysis enforces a rigorous security property: noninterference. Moreover, we show that the analysis is strictly more precise than a classic flow-sensitive type system, and it allows sound control of information flow in the presence of mutable variables without resorting to run-time mechanisms.