HOME | DEUTSCH | IMPRESSUM | KIT

Journal Article: A new algorithm for low-deterministic security

[giffhorn15lsod]Dennis Giffhorn, Gregor Snelting, A new algorithm for low-deterministic security, International Journal of Information Security, Vol. 14, (3), pp. 263-287, 2015.

Abstract

We present a new algorithm for checking probabilistic noninterference in concurrent programs. The algorithm, named RLSOD, is based on the Low-Security Observational Determinism criterion. It utilizes program dependence graphs for concurrent programs, and is flow-sensitive, context-sensitive, object-sensitive, and optionally time-sensitive. Due to a new definition of low-equivalency for infinite traces, the algorithm avoids restrictions or soundness leaks of previous approaches. A soundness proof is provided. Flow-sensitivity turns out to be the key to precision, and avoids prohibition of useful nondeterminism. The algorithm has been implemented for full Java bytecode with unlimited threads. Precision and scalability have been experimentally validated.

Download

  [Link]   [DOI]

Original article available at springerlink.com.

BibTeX

Authors at the institute

Department Head
Prof. Gregor Snelting
Former Staff Member
Dr.-Ing. Dennis Giffhorn

Projects

Project
IFC for Mobile Components
VALSOFT/Joana