HyLeak: Hybrid Analysis Tool for Information Leakage

HyLeak: Hybrid Analysis Tool for Information Leakage
复制标题

HyLeak:信息泄露的混合分析工具

DOI:
10.1007/978-3-319-68167-2_11
复制
发表时间:
2017
期刊:
Proc. of the 15th International Symposium on Automated Technology for Verification and Analysis (ATVA 2017), Lecture Notes in Computer Science
影响因子:
--
通讯作者:
and Louis-Marie Traonouez
and Louis-Marie Traonouez
中科院分区:
--
文献类型:
--
作者:
Fabrizio Biondi;Yusuke Kawamoto;Axel Legay;and Louis-Marie Traonouez

文献摘要

参考文献

被引文献

相似文献

介绍了一种用于推理程序中信息泄漏量的工具HyLeak。该工具将程序的源代码作为输入,并对其进行分析,以估计通过互信息衡量的泄漏信息量。泄漏估算主要基于精确规划分析和随机规划模拟统计分析相结合的混合方法。这样,与以前仅使用其中一种分析方法的工具相比,该工具结合了符号化和随机化技术的优点,提供了更准确的估计和更便宜的分析。HyLeak是公开的,能够评估随机程序的信息泄漏,即使在秘密域很大的情况下也是如此。我们通过实例证明,在能够以同样高的估计精度分析随机化方案的工具中,HyLeaks具有最好的性能。
We present HyLeak, a tool for reasoning about the quantity of information leakage in programs. The tool takes as input the source code of a program and analyzes it to estimate the amount of leaked information measured by mutual information. The leakage estimation is mainly based on a hybrid method that combines precise program analysis with statistical analysis using stochastic program simulation. This way, the tool combines the best of both symbolic and randomized techniques to provide more accurate estimates with cheaper analysis, in comparison with the previous tools using one of the analysis methods alone. HyLeak is publicly available and is able to evaluate the information leakage of randomized programs, even when the secret domain is large. We demonstrate with examples that HyLeaks has the best performance among the tools that are able to analyze randomized programs with similarly high precision of estimates.
DOI: 10.1109/csf.2013.20
发表时间: 2013
期刊: --
影响因子: --
作者:
Chothia T
通讯作者: Chothia T
DOI: 10.1007/978-3-319-10696-0_28
发表时间: 2014
影响因子: --
作者:
Yusuke Kawamoto;K. Chatzikokolakis;C. Palamidessi
通讯作者: C. Palamidessi
使用符号模型检查计算信息流
DOI: --
发表时间: 2014
期刊: Foundations of Software Technology and Theoretical Computer Science
影响因子: --
作者:
Rohit Chadha;Umang Mathur;Stefan Schwoon
通讯作者: Stefan Schwoon
DOI: 10.1109/csf.2010.8
发表时间: 2010-07
期刊: 2010 23rd IEEE Computer Security Foundations Symposium
影响因子: --
作者:
Boris Köpf;A. Rybalchenko
通讯作者: Boris Köpf;A. Rybalchenko
DOI: --
发表时间: 2013
影响因子: 1.1
作者:
Fabrizio Biondi;Axel Legay;P. Malacaria;A. Wąsowski
通讯作者: A. Wąsowski