Projects per year
Abstract
Protecting sensitive information from improper disclosure is a fundamental security goal. It is complicated, and difficult to achieve, often because of unavoidable or even unpredictable operating conditions that can lead to breaches in planned security defences. An attractive approach is to frame the goal as a quantitative problem, and then to design methods that measure system vulnerabilities in terms of the amount of information they leak. A consequence is that the precise operating conditions, and assumptions about prior knowledge, can play a crucial role in assessing the severity of any measured vunerability. We develop this theme by concentrating on vulnerability measures that are robust in the sense of allowing general leakage bounds to be placed on a program, bounds that apply whatever its operating conditions and whatever the prior knowledge might be. In particular we propose a theory of channel capacity, generalising the Shannon capacity of information theory, that can apply both to additive- and to multiplicative forms of a recently-proposed measure known as g-leakage. Further, we explore the computational aspects of calculating these (new) capacities: one of these scenarios can be solved efficiently by expressing it as a Kantorovich distance, but another turns out to be NP-complete. We also find capacity bounds for arbitrary correlations with data not directly accessed by the channel, as in the scenario of Dalenius's Desideratum.
Original language | English |
---|---|
Title of host publication | Proceedings - 2014 IEEE 27th Computer Security Foundations Symposium, CSF 2014 |
Place of Publication | Los Alamitos, CA |
Publisher | Institute of Electrical and Electronics Engineers (IEEE) |
Pages | 308-322 |
Number of pages | 15 |
Volume | 2014-January |
ISBN (Electronic) | 9781479942909 |
DOIs | |
Publication status | Published - 13 Nov 2014 |
Event | 27th IEEE Computer Security Foundations Symposium, CSF 2014 - Vienna, Austria Duration: 19 Jul 2014 → 22 Jul 2014 |
Publication series
Name | Proceedings-Computer Security Foundations Workshop |
---|---|
Publisher | IEEE COMPUTER SOC |
ISSN (Print) | 1063-6900 |
Other
Other | 27th IEEE Computer Security Foundations Symposium, CSF 2014 |
---|---|
Country/Territory | Austria |
City | Vienna |
Period | 19/07/14 → 22/07/14 |
Fingerprint
Dive into the research topics of 'Additive and multiplicative notions of leakage, and their capacities'. Together they form a unique fingerprint.Projects
- 1 Finished
-
Making software more reliable using a new model for entropies of computers' internal state
McIver, A., Morgan, C. & Katoen, J. P.
16/02/12 → 31/12/17
Project: Research