Correlated secrets in quantitative information flow

Nicolás E. Bordenabe; Geoffrey Smith

doi:10.1109/CSF.2016.14

Correlated secrets in quantitative information flow

Nicolás E. Bordenabe, Geoffrey Smith

School of Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

9 Citations (Scopus)

Abstract

A fundamental challenge in controlling the leakage of sensitive information by computer systems is the possibility of correlations between different secrets, with the result that leaking information about one secret may also leak information about a different secret. We explore such leakage, here called Dalenius leakage, within the context of the g-leakage family of leakage measures. We prove a fundamental equivalence between Dalenius min-entropy leakage under arbitrary correlations and g-leakage under arbitrary gain functions, and show how this equivalence increases the significance of the composition refinement relation. We also consider Dalenius leakage in the case when the marginal distributions induced by the correlation are known, giving techniques to compute stronger upper bounds in this case.

Original language	English
Title of host publication	CSF 2016
Subtitle of host publication	IEEE 29th Computer Security Foundations Symposium : proceedings
Place of Publication	Piscataway, NJ
Publisher	Institute of Electrical and Electronics Engineers (IEEE)
Pages	93-104
Number of pages	12
ISBN (Print)	9781509026074
DOIs	https://doi.org/10.1109/CSF.2016.14
Publication status	Published - 2016
Event	IEEE Computer Security Foundations Symposium (29th : 2016) - Lisbon, Portugal Duration: 27 Jun 2016 → 1 Jul 2016

Conference

Conference	IEEE Computer Security Foundations Symposium (29th : 2016)
City	Lisbon, Portugal
Period	27/06/16 → 1/07/16

Keywords

Information leakage
Dalenius’s Desideratum
channel capacity

Access to Document

10.1109/CSF.2016.14

Cite this

@inproceedings{0c49ef45110e4f4ea59061375d67fc33,

title = "Correlated secrets in quantitative information flow",

abstract = "A fundamental challenge in controlling the leakage of sensitive information by computer systems is the possibility of correlations between different secrets, with the result that leaking information about one secret may also leak information about a different secret. We explore such leakage, here called Dalenius leakage, within the context of the g-leakage family of leakage measures. We prove a fundamental equivalence between Dalenius min-entropy leakage under arbitrary correlations and g-leakage under arbitrary gain functions, and show how this equivalence increases the significance of the composition refinement relation. We also consider Dalenius leakage in the case when the marginal distributions induced by the correlation are known, giving techniques to compute stronger upper bounds in this case.",

keywords = "Information leakage, Dalenius{\textquoteright}s Desideratum, channel capacity",

author = "Bordenabe, {Nicol{\'a}s E.} and Geoffrey Smith",

year = "2016",

doi = "10.1109/CSF.2016.14",

language = "English",

isbn = "9781509026074",

pages = "93--104",

booktitle = "CSF 2016",

publisher = "Institute of Electrical and Electronics Engineers (IEEE)",

address = "United States",

note = "IEEE Computer Security Foundations Symposium (29th : 2016) ; Conference date: 27-06-2016 Through 01-07-2016",

}

Bordenabe, NE & Smith, G 2016, Correlated secrets in quantitative information flow. in CSF 2016: IEEE 29th Computer Security Foundations Symposium : proceedings. Institute of Electrical and Electronics Engineers (IEEE), Piscataway, NJ, pp. 93-104, IEEE Computer Security Foundations Symposium (29th : 2016), Lisbon, Portugal, 27/06/16. https://doi.org/10.1109/CSF.2016.14

Correlated secrets in quantitative information flow. / Bordenabe, Nicolás E.; Smith, Geoffrey.

CSF 2016: IEEE 29th Computer Security Foundations Symposium : proceedings. Piscataway, NJ : Institute of Electrical and Electronics Engineers (IEEE), 2016. p. 93-104.

Research output: Chapter in Book/Report/Conference proceeding › Conference proceeding contribution › peer-review

TY - GEN

T1 - Correlated secrets in quantitative information flow

AU - Bordenabe, Nicolás E.

AU - Smith, Geoffrey

PY - 2016

Y1 - 2016

N2 - A fundamental challenge in controlling the leakage of sensitive information by computer systems is the possibility of correlations between different secrets, with the result that leaking information about one secret may also leak information about a different secret. We explore such leakage, here called Dalenius leakage, within the context of the g-leakage family of leakage measures. We prove a fundamental equivalence between Dalenius min-entropy leakage under arbitrary correlations and g-leakage under arbitrary gain functions, and show how this equivalence increases the significance of the composition refinement relation. We also consider Dalenius leakage in the case when the marginal distributions induced by the correlation are known, giving techniques to compute stronger upper bounds in this case.

AB - A fundamental challenge in controlling the leakage of sensitive information by computer systems is the possibility of correlations between different secrets, with the result that leaking information about one secret may also leak information about a different secret. We explore such leakage, here called Dalenius leakage, within the context of the g-leakage family of leakage measures. We prove a fundamental equivalence between Dalenius min-entropy leakage under arbitrary correlations and g-leakage under arbitrary gain functions, and show how this equivalence increases the significance of the composition refinement relation. We also consider Dalenius leakage in the case when the marginal distributions induced by the correlation are known, giving techniques to compute stronger upper bounds in this case.

KW - Information leakage

KW - Dalenius’s Desideratum

KW - channel capacity

UR - http://www.scopus.com/inward/record.url?scp=84985894848&partnerID=8YFLogxK

U2 - 10.1109/CSF.2016.14

DO - 10.1109/CSF.2016.14

M3 - Conference proceeding contribution

SN - 9781509026074

SP - 93

EP - 104

BT - CSF 2016

PB - Institute of Electrical and Electronics Engineers (IEEE)

CY - Piscataway, NJ

T2 - IEEE Computer Security Foundations Symposium (29th : 2016)

Y2 - 27 June 2016 through 1 July 2016

ER -

Correlated secrets in quantitative information flow

Abstract

Conference

Keywords

Access to Document

Other files and links

Fingerprint

Cite this