Securing information flow via dynamic capture of dependencies

Issue title: 20th IEEE Computer Security Foundations Symposium (CSF)

Guest editors: Andrei Sabelfeld

Article type: Research Article

Authors: Shroff, Paritosh^{a; *} | Smith, Scott F.^a | Thober, Mark^b

Affiliations: [a] Department of Computer Science, The Johns Hopkins University, Baltimore, MD, USA | [b] The Johns Hopkins University, Applied Physics Laboratory, Laurel, MD, USA

Correspondence: [*] Corresponding author: Paritosh Shroff, New Engineering Building 219, Department of Computer Science, The Johns Hopkins University, Baltimore, MD 21218-2686, USA. Tel.: +1 410 516 6067; Fax: +1 410 516 6134; E-mail: [email protected].

Abstract: Although static systems for information flow security are well studied, few works address runtime information flow monitoring. Runtime information flow control offers distinct advantages in precision and in the ability to support dynamically defined policies. To this end, we here develop a new runtime information flow system based on the runtime tracking of indirect dependencies between program points. Our system tracks both direct and indirect information flows, and noninterference results are proved.

Keywords: Secure information flow, runtime monitoring, dependency tracking

DOI: 10.3233/JCS-2008-0335

Journal: Journal of Computer Security, vol. 16, no. 5, pp. 637-688, 2008