Combining Static and Statistical Approaches to Quantitative Information Flow - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Pré-Publication, Document De Travail Année : 2015

Combining Static and Statistical Approaches to Quantitative Information Flow

Résumé

Systems dealing with confidential data may leak some information by their observable outputs. Quantitative information flow analysis provides a method for quantifying the amount of such information leakage. To avoid the high computational cost of exhaustive search, statistical analysis has been studied to estimate information leakage by analyzing only a small but representative subset of the system's behavior. In this paper we propose a new compositional statistical analysis method for quantitative information flow that combines multiple statistical analyses with static trace analysis. We use partial knowledge of the system's source code or specification, therefore improving both quality and cost of the analysis. The new method can optimize the use of weighted statistical analysis by performing it on components of the system and appropriately adapting their weights. We show this approach combined with the precision of trace analysis produces better estimates and narrower confidence intervals than the state of the art.
Fichier principal
Vignette du fichier
TACAS16_submission_98.pdf (454.88 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01241360 , version 1 (10-12-2015)
hal-01241360 , version 2 (01-09-2016)
hal-01241360 , version 3 (01-09-2016)

Identifiants

  • HAL Id : hal-01241360 , version 1

Citer

Yusuke Kawamoto, Fabrizio Biondi, Axel Legay. Combining Static and Statistical Approaches to Quantitative Information Flow. 2015. ⟨hal-01241360v1⟩
372 Consultations
375 Téléchargements

Partager

Gmail Facebook X LinkedIn More