Logo eprints

Quantitative Multirun Security under Active Adversaries

Boreale, Michele and Pampaloni, Francesca Quantitative Multirun Security under Active Adversaries. In: Proceedings of the Ninth International Conference on Quantitative Evaluation of Systems (QEST), 2012. IEEE, pp. 158-167. ISBN 978-0-7695-4781-7 (2012)

Full text not available from this repository.

Abstract

We study the security of probabilistic programsunder the assumption that an active adversary controls part ofthe program's inputs, and the program can be run several times. The adversary's target are the high, confidential inputs to theprogram. We model the program behaviour as an information-theoretic channel and define a notion of quantitative multi-runleakage. We characterize in a simple way both the asymptoticmulti-run leakage and its exponential growth rate, depending onthe number of runs, the characterization is given in terms ofthe program's channel matrix. We then study the case where adeclassification policy is specified: we define a measure of thedegree of violation of the policy and characterize its asymptoticmulti-run behaviour, thus allowing for a combined analysis ofwhat and how much information is leaked. We finally study thecase where a user is faced with the task of assessing the undueinfluence of an active adversary on a deployed program or system, of which only a (black-box) specification is available.

Item Type: Book Section
Identification Number: https://doi.org/10.1109/QEST.2012.31
Additional Information: Quantitative Evaluation of Systems (QEST), London, 17-20 September 2012
Projects: Work partially supported by the EU project ASCENS under the FET open initiative in FP7.
Uncontrolled Keywords: IEEE Terms: Contex; Credit cards; Probabilistic logic; Probability distribution; Security; Terminology; Vectors
Subjects: Q Science > QA Mathematics > QA75 Electronic computers. Computer science
Research Area: Computer Science and Applications
Depositing User: Ms T. Iannizzi
Date Deposited: 12 Apr 2013 13:32
Last Modified: 12 Apr 2013 13:32
URI: http://eprints.imtlucca.it/id/eprint/1542

Actions (login required)

Edit Item Edit Item