Permissive dynamic information flow analysis
Permissive dynamic information flow analysis
复制标题
许可式动态信息流分析
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
C. Flanagan
中科院分区：
文献类型：
--
作者：
Thomas H. Austin;C. Flanagan
动态信息流分析中的一个关键挑战是处理隐式流，其中私人变量的代码更新公共变量x。将X升级到私有结果的幼稚方法部分被部分泄漏，其值包含私人数据，但其标签可能会在替代执行方面公开（在没有执行条件更新的情况下）。先前的工作提出了无敏感的升级检查，该检查通过禁止部分泄漏的数据来处理隐式流，但试图从私人上下文中更新公共变量会导致执行陷入困境。
为了克服这一限制，我们制定了一种声音而灵活的允许升级策略。为了防止信息泄漏，允许部分泄漏的数据，但请仔细跟踪，以确保其永远不会被完全泄漏。这种允许的升级策略比以前的方法更灵活，例如无敏感的升级检查。
在允许的升级策略下，必须将部分泄漏的数据标记为有条件测试之前的私有数据，从而确保当前执行以及替代执行路径既私有。本文还提出了一种动态分析技术，用于推断这些私有化操作并将其插入程序源代码。这些技术的组合允许更多程序完成完成，同时仍然以纯粹的动态方式保证对终止不敏感的非干预。
A key challenge in dynamic information flow analysis is handling implicit flows, where code conditional on a private variable updates a public variable x. The naive approach of upgrading x to private results in x being partially leaked, where its value contains private data but its label might remain public on an alternative execution (where the conditional update was not performed). Prior work proposed the no-sensitive-upgrade check, which handles implicit flows by prohibiting partially leaked data, but attempts to update a public variable from a private context causes execution to get stuck.
To overcome this limitation, we develop a sound yet flexible permissive-upgrade strategy. To prevent information leaks, partially leaked data is permitted but carefully tracked to ensure that it is never totally leaked. This permissive-upgrade strategy is more flexible than the prior approaches such as the no-sensitive-upgrade check.
Under the permissive-upgrade strategy, partially leaked data must be marked as private before being used in a conditional test, thereby ensuring that it is private for both the current execution as well as alternate execution paths. This paper also presents a dynamic analysis technique for inferring these privatization operations and inserting them into the program source code. The combination of these techniques allows more programs to run to completion, while still guaranteeing termination-insensitive non-interference in a purely dynamic manner.
DOI：
10.1145/1111037.1111045
发表时间：
2006-01
期刊：
--
影响因子：
--
作者：
Sebastian Hunt;David Sands
通讯作者：
Sebastian Hunt;David Sands