Additive and multiplicative notions of leakage, and their capacities

Mário S. Alvim, Konstantinos Chatzikokolakis, Annabelle McIver, Carroll Morgan, Catuscia Palamidessi, Geoffrey Smith

Research output: Chapter in Book/Report/Conference proceedingConference proceeding contribution

42 Citations (Scopus)

Abstract

Protecting sensitive information from improper disclosure is a fundamental security goal. It is complicated, and difficult to achieve, often because of unavoidable or even unpredictable operating conditions that can lead to breaches in planned security defences. An attractive approach is to frame the goal as a quantitative problem, and then to design methods that measure system vulnerabilities in terms of the amount of information they leak. A consequence is that the precise operating conditions, and assumptions about prior knowledge, can play a crucial role in assessing the severity of any measured vunerability. We develop this theme by concentrating on vulnerability measures that are robust in the sense of allowing general leakage bounds to be placed on a program, bounds that apply whatever its operating conditions and whatever the prior knowledge might be. In particular we propose a theory of channel capacity, generalising the Shannon capacity of information theory, that can apply both to additive- and to multiplicative forms of a recently-proposed measure known as g-leakage. Further, we explore the computational aspects of calculating these (new) capacities: one of these scenarios can be solved efficiently by expressing it as a Kantorovich distance, but another turns out to be NP-complete. We also find capacity bounds for arbitrary correlations with data not directly accessed by the channel, as in the scenario of Dalenius's Desideratum.

Original languageEnglish
Title of host publicationProceedings - 2014 IEEE 27th Computer Security Foundations Symposium, CSF 2014
Place of PublicationLos Alamitos, CA
PublisherInstitute of Electrical and Electronics Engineers (IEEE)
Pages308-322
Number of pages15
Volume2014-January
ISBN (Electronic)9781479942909
DOIs
Publication statusPublished - 13 Nov 2014
Event27th IEEE Computer Security Foundations Symposium, CSF 2014 - Vienna, Austria
Duration: 19 Jul 201422 Jul 2014

Other

Other27th IEEE Computer Security Foundations Symposium, CSF 2014
CountryAustria
CityVienna
Period19/07/1422/07/14

Fingerprint Dive into the research topics of 'Additive and multiplicative notions of leakage, and their capacities'. Together they form a unique fingerprint.

  • Cite this

    Alvim, M. S., Chatzikokolakis, K., McIver, A., Morgan, C., Palamidessi, C., & Smith, G. (2014). Additive and multiplicative notions of leakage, and their capacities. In Proceedings - 2014 IEEE 27th Computer Security Foundations Symposium, CSF 2014 (Vol. 2014-January, pp. 308-322). [6957119] Los Alamitos, CA: Institute of Electrical and Electronics Engineers (IEEE). https://doi.org/10.1109/CSF.2014.29