Information Leakage by Trace Analysis in QUAIL - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year : 2014

Information Leakage by Trace Analysis in QUAIL

Abstract

Quantitative security techniques have been proven effective to measure the security of systems against various types of attackers. However, such tech-niques are based on computing exponentially large channel matrices or Markov chains, making them impractical for large programs. We propose a different ap-proach based on abstract trace analysis. By analyzing directly sets of execution traces of the program and computing security measures on the results, we are able to scale down the exponential cost of the problem. Also, we are able to appy statistical simulation techniques, allowing us to obtain significant results even without exploring the full space of traces. We have implemented the resulting algorithms in the QUAIL tool. We compare their effectiveness against the state of the art LeakWatch tool on two case studies: privacy of user consumption in smart grid systems and anonymity of voters in different voting schemes.
Fichier principal
Vignette du fichier
main.pdf (299.61 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

hal-01088208 , version 1 (27-11-2014)

Identifiers

  • HAL Id : hal-01088208 , version 1

Cite

Fabrizio Biondi, Jean Quilbeuf, Axel Legay. Information Leakage by Trace Analysis in QUAIL. 2014. ⟨hal-01088208⟩
205 View
130 Download

Share

Gmail Facebook X LinkedIn More