Dissertation: Systematic Approaches to Advanced Information Flow Analysis -- and Applications to Software Security

In this thesis, I report on applications of slicing and program dependence graphs (PDGs) to software security. Moreover, I propose a framework that generalizes both data-flow analysis on control-flow graphs and slicing on program dependence graphs. Such a framework enables to systematically derive data-flow-like analyses on program dependence graphs that go beyond slicing. The main theses of my dissertation are: (1) PDG-based information flow control is useful, practically applicable and relevant. (2) Data-flow analysis can be systematically applied to program dependence graphs. (3) Data-flow analysis on PDGs can be practically conducted.