What, Indeed, Is Intransitive Noninterference?

Abstract. This paper argues that Haigh and Young’s definition of noninterference for intransitive security policies admits information flows that are not in accordance with the intuitions it seeks to formalise. Several alternative definitions are discussed, which are shown to be equivalent to the classical definition of noninterference with respect to transitive policies. Rushby’s unwinding conditions for intransitive noninterference are shown to be sound and complete for one of these definitions, TAsecurity. Access control systems compatible with a policy are also shown to be TA-secure, and it is also shown that TA-security implies that the system can be interpreted as an access control system.

• Type: Conference
• Year: 2007
• Where: ESORICS
• Authors: Ron van der Meyden
• Keywords: Access Control System, ESORICS 2007, Intransitive Security Policies, Rushby’s Unwinding Conditions, Security Privacy