Uniform Protection for Multi-exposed Targets

Research output: Chapter in Book/Report/Conference proceedingArticle in proceedingsResearchpeer-review

Abstract

Ensuring that information is protected proportionately to its value is a major challenge in the development of robust distributed systems, where code complexity and technological constraints might allow reaching a key functionality along various paths. We propose a protection analysis over the Quality Calculus that computes the combinations of data required to reach a program point and relates them to a notion of cost. In this way, we can compare the security deployed on different paths that expose the same resource. The analysis is formalised in terms of flow logic, and is implemented as an optimisation problem encoded into Satisfiability Modulo Theories, allowing us to deal with complex cost structures. The usefulness of the approach is demonstrated on the study of password recovery systems.
Original languageEnglish
Title of host publicationFormal Techniques for Distributed Objects, Components, and Systems. Proceedings
EditorsErika Ábrahám, Catuscia Palamidessi
PublisherSpringer
Publication date2014
Pages182-198
ISBN (Print)978-3-662-43612-7
ISBN (Electronic)978-3-662-43613-4
DOIs
Publication statusPublished - 2014
Event34th IFIP WG 6.1 International Conference, FORTE 2014 - Berlin, Germany
Duration: 3 Jun 20145 Jun 2014

Conference

Conference34th IFIP WG 6.1 International Conference, FORTE 2014
CountryGermany
CityBerlin
Period03/06/201405/06/2014
SeriesLecture Notes in Computer Science
Volume8461
ISSN0302-9743

Fingerprint Dive into the research topics of 'Uniform Protection for Multi-exposed Targets'. Together they form a unique fingerprint.

Cite this