Hybrid Information Flow Monitoring against Web Tracking
Hybrid Information Flow Monitoring against Web Tracking
复制标题
DOI：
10.1109/csf.2013.23
复制
发表时间：
2013-06
期刊：
影响因子：
--
通讯作者：
Frédéric Besson;Nataliia Bielova;T. Jensen
中科院分区：
文献类型：
--
作者：
Frédéric Besson;Nataliia Bielova;T. Jensen
受无状态网络跟踪（指纹识别）问题的启发，我们提出了一种新的混合信息流监控方法，通过使用逻辑公式跟踪秘密变量的知识。这种知识表示有助于比较和提高混合信息流监控的精度。我们定义了一个通用的混合监测参数的静态分析，并推导出充分条件的静态分析的稳健性和相对精度的混合监测。我们使用静态常量和依赖分析的组合实例化通用监视器。其他几个混合监控器，包括那些基于众所周知的混合技术的信息流控制的形式化作为我们的通用混合监控器的实例。这些监视器被组织成一个层次结构，建立其相对精度。整个框架是伴随着一个正式的理论在Coq证明助理。
Motivated by the problem of stateless web tracking (fingerprinting), we propose a novel approach to hybrid information flow monitoring by tracking the knowledge about secret variables using logical formulae. This knowledge representation helps to compare and improve precision of hybrid information flow monitors. We define a generic hybrid monitor parametrised by a static analysis and derive sufficient conditions on the static analysis for soundness and relative precision of hybrid monitors. We instantiate the generic monitor with a combined static constant and dependency analysis. Several other hybrid monitors including those based on well-known hybrid techniques for information flow control are formalised as instances of our generic hybrid monitor. These monitors are organised into a hierarchy that establishes their relative precision. The whole framework is accompanied by a formalisation of the theory in the Coq proof assistant.