NDLI: Automated enforcement for relaxed information release with reference points

Content Provider	Springer Nature Link
Author	Sun, Cong Xi, Ning Gao, Sheng Chen, Zhong Ma, JianFeng
Copyright Year	2014
Abstract	Language-based information flow security is a promising approach for enforcement of strong security and protection of the data confidentiality for the end-to-end communications. Here, noninterference is the standard and most restricted security property that completely forbids confidential data from being released to public context. Although this baseline property has been extensively enforced in various cases, there are still many programs, which are considered secure enough, violating this property in some way. In order to control the information release in these programs, the predetermined ways should be specified by means of which confidential data can be released. These intentional releases, also called declassifications, are regulated by several more relaxed security properties than noninterference. The security properties for controlled declassification have been developed on different dimensions with declassification goals. However, the mechanisms used to enforce these properties are still unaccommodating, unspecific, and insufficiently studied. In this work, a new security property, the Relaxed Release with Reference Points (R3P), is presented to limit the information that can be declassified in a program. Moreover, a new mechanism using reachability analysis has been proposed for the pushdown system to enforce R3P on programs. In order to show R3P is competent for use, it has been proved that it complies with the well-known prudent principles of declassification, and in addition finds some restrictions on our security policy. The widespread usage, precision, efficiency, and the influencing factors of our enforcement have been evaluated.创新点: (1) 提出一种更通用的安全属性 (R3P), 该属性可由自动程序验证进行实现 (2) 证明了该安全属性与一些通用的机密消去谨慎性原则相一致, 并提出一种新的谨慎性原则—“条件持久性”, 用以说明安全策略的局限性 (3) 首次使用可达性分析来实现“What”维度的机密消去安全属性, 实现方法比现有的基于自动程序验证的方法更通用 (4) 提出了用于模型转换的“存储—匹配”模式, 能够有效减小状态空间并降低验证开销.
Starting Page	1
Ending Page	19
Page Count	19
File Format	PDF
ISSN	1674733X
Journal	Science in China Series : Information Sciences
Volume Number	57
Issue Number	11
e-ISSN	18691919
Language	Chinese
Publisher	Science China Press
Publisher Date	2014-09-04
Publisher Place	Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	information flow security policy noninterference declassification pushdown system program analysis Information Systems and Communication Service
Content Type	Text
Resource Type	Article
Subject	Computer Science

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Enforcing Relaxed Declassifications with Reference Points

A new enforcement on declassification with reachability analysis

Downgrading policies and relaxed noninterference

Information declassification for multi-threaded programs.

End-to-End Enforcement of Erasure and Declassification

Downgrading policies and relaxed noninterference (2005)

Robust Declassification (2001)

Downgrading policies and relaxed noninterference (2005)

End-to-End Enforcement of Erasure and Declassification

Automated enforcement for relaxed information release with reference points

Similar Documents

Enforcing Relaxed Declassifications with Reference Points

A new enforcement on declassification with reachability analysis

Downgrading policies and relaxed noninterference

Information declassification for multi-threaded programs.

End-to-End Enforcement of Erasure and Declassification

Downgrading policies and relaxed noninterference (2005)

Robust Declassification (2001)

Downgrading policies and relaxed noninterference (2005)

End-to-End Enforcement of Erasure and Declassification

Automated enforcement for relaxed information release with reference points