article · 2010

Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf

Alejandro Russo, Andrei Sabelfeld

Cited by 0Abstract and details only

Abstract

Abstract—This paper seeks to answer fundamental questions about trade-offs between static and dynamic security analysis. It has been previously shown that flow-sensitive static informationflow analysis is a natural generalization of flow-insensitive static analysis, which allows accepting more secure programs. It has been also shown that sound purely dynamic information-flow enforcement is more permissive than static analysis in the flowinsensitive case. We argue that the step from flow-insensitive to flow-sensitive is fundamentally limited for purely dynamic information-flow controls. We prove impossibility of a sound purely dynamic information-flow monitor that accepts programs certified by a classical flow-sensitive static analysis. A side implication is impossibility of permissive dynamic instrumented security semantics for information flow, which guides us to uncover an unsound semantics from the literature. We present a general framework for hybrid mechanisms that is parameterized in the static part and in the reaction method of the enforcement (stop, suppress, or rewrite) and give security guarantees with respect to termination-insensitive noninterference for a simple language with output. I.

Cite this paper

APA 7

Russo, A., & Sabelfeld, A. (2010). Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf.

MLA 9

Russo, Alejandro, and Andrei Sabelfeld. “Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf.” 2010.

Chicago

Russo, Alejandro, and Andrei Sabelfeld. 2010. “Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf.”

Harvard

Russo, A. and Sabelfeld, A. (2010) ‘Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf’.

BibTeX

@article{russo2010dynamic,
  title = {{Dynamic vs. static flow-sensitive security analysis. http://www.cse.chalmers.se/ ∼russo/publications files/ csf2010full.pdf}},
  author = {Russo, Alejandro and Sabelfeld, Andrei},
  year = {2010}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.