Theoretical Fundamentals of Gate Level Information Flow Tracking
Theoretical Fundamentals of Gate Level Information Flow Tracking
复制标题
DOI：
10.1109/tcad.2011.2120970
复制
发表时间：
2011-08
影响因子：
2.9
通讯作者：
Wei Hu;J. Oberg;A. Irturk;Mohit Tiwari;T. Sherwood;Dejun Mu;R. Kastner
中科院分区：
文献类型：
--
作者：
Wei Hu;J. Oberg;A. Irturk;Mohit Tiwari;T. Sherwood;Dejun Mu;R. Kastner
信息流跟踪是用于检测意想不到的信息流的计算机安全工具。但是，基于软件的信息流跟踪实现在精确性和性能方面存在缺点。结果，研究人员已经开始探索硬件中的跟踪信息流，更具体地说，通过逻辑功能了解各个信息的干扰。这样的门水平信息流跟踪（Glift）可以在单个位的粒度下跟踪系统中的信息流。但是，Glift的理论基础对于在实际应用中采用至关重要，从未对其进行彻底研究。本文通过介绍常用的影子逻辑生成方法引入定义，属性和不精确的问题，对Glift进行了基本分析。本文还提出了解决此不精确问题的解决方案，并提供了表明这种不精确性可以耐受性的结果，从而使面积和延迟的好处受益。
Information flow tracking is an effective tool in computer security for detecting unintended information flows. However, software based information flow tracking implementations have drawbacks in preciseness and performance. As a result, researchers have begun to explore tracking information flow in hardware, and more specifically, understanding the interference of individual bits of information through logical functions. Such gate level information flow tracking (GLIFT) can track information flow in a system at the granularity of individual bits. However, the theoretical basis for GLIFT, which is essential to its adoption in real applications, has never been thoroughly studied. This paper provides fundamental analysis of GLIFT by introducing definitions, properties, and the imprecision problem with a commonly used shadow logic generation method. This paper also presents a solution to this imprecision problem and provides results that show this impreciseness can be tolerated for the benefit of lower area and delay.