Flow-sensitive semantics for dynamic information flow policies
Flow-sensitive semantics for dynamic information flow policies
复制标题
动态信息流策略的流敏感语义
DOI：
10.1145/1554339.1554352
复制
发表时间：
2009
期刊：
影响因子：
--
通讯作者：
David Sands
中科院分区：
文献类型：
--
作者：
Niklas Broberg;David Sands
动态信息流策略（例如解密）对于实际上有用的信息流控制系统至关重要。但是，迄今为止提出的大多数系统处理动态信息流策略都具有共同的缺点。它们以固有的流动不敏感的语义模型为基础，这意味着许多简单的直觉安全程序将被视为不安全感。
在本文中，我们在特定系统的背景下解决了此问题。我们为基于知识风格的定义（遵循Askarov and Sabelfeld）提供了一种新的流动语义，用于流量锁，其中观察程序运行的演员获得的知识会根据每个时间开放的流量限制，这些流程在每个时期都打开进行观察。我们在简单的流锁类型系统中证明了该定义的适用性。我们还展示了如何使用流锁对其他系统进行编码，这是一种简单的手段，可以为这些系统提供流动敏感的语义。
Dynamic information flow policies, such as declassification, are essential for practically useful information flow control systems. However, most systems proposed to date that handle dynamic information flow policies suffer from a common drawback. They build on semantic models of security which are inherently flow insensitive, which means that many simple intuitively secure programs will be considered insecure.
In this paper we address this problem in the context of a particular system, flow locks. We provide a new flow sensitive semantics for flow locks based on a knowledge-style definition (following Askarov and Sabelfeld), in which the knowledge gained by an actor observing a program run is constrained according to the flow locks which are open at the time each observation is made. We demonstrate the applicability of the definition in a soundness proof for a simple flow lock type system. We also show how other systems can be encoded using flow locks, as an easy means to provide these systems with flow sensitive semantics.