Securing information flow via dynamic capture of dependencies

Although static systems for information flow security are well-studied, few works address runtime information flow monitoring. Runtime information flow control offers distinct advantages in precision and in the ability to support dynamically defined policies. To this end, we here develop a new runtime information flow system based on the runtime tracking of indirect dependencies between program points. Our system tracks both direct and indirect information flows, and noninterference results are proved. Keywords secure information flow, runtime monitoring, dependency tracking In the Special Issue of Journal of Computer Security on CSF 2007. Andrei Sabelfeld, Guest Editor. An earlier version [SST07] of this paper appeared in the proceedings of CSF 2007: 20th IEEE Computer Security Foundations Symposium under the title "Dynamic Dependency Monitoring to Secure Information Flow". 1 

• Type: Journal
• Year: 2008
• Where: JCS
• Authors: Paritosh Shroff, Scott F. Smith, Mark Thober
• Keywords: Information Flow, Information Flow Security, JCS 2008, Runtime Information Flow