Risk assessment of security threats for looping constructs^*

Issue title: Security Issues in Concurrency (SecCo'07)

Guest editors: Daniele GorlaGuest-Editor and Catuscia PalamidessiGuest-Editor

Article type: Research Article

Authors: Malacaria, Pasquale

Affiliations: School of Electronic Engineering and Computer Science, Queen Mary University of London, London. E-mail: [email protected]

Note: [*] Extended and revised version of [16]. Research partially supported by EPSRC grant EP/C009967/1.

Abstract: There is a clear intuitive connection between the notion of leakage of information in a program and concepts from Information Theory. We explore this connection by interpreting Information Theory as a security risk assessment of programs. Information Theory will then be used to introduce techniques to reason on looping constructs, which are the kind of programs that previous quantitative models failed to satisfactory address. The semantics here introduced allows to describe both the amount and rate of leakage; if either is small enough, then a program might be deemed “secure”. Using the semantics we provide an investigation and classification of bounded and unbounded covert channels.

Keywords: Quantitative Information Flow, Information Theory, language based security

DOI: 10.3233/JCS-2010-0360

Journal: Journal of Computer Security, vol. 18, no. 2, pp. 191-228, 2010