Controlling Information Flows in Net Services with Low Runtime Overhead

Abstract

Abstract-This paper presents the information flow control model NetIFC to prevent information leakage when a net service is being executed. NetIFC offers the following features: (1) it blocks at least statements as possible and (2) it reduces runtime overhead. To achieve the first feature, NetIFC strictly controls output statements because only output may leak information. To achieve the second feature, NetIFC is executed in parallel with a service in different sites to monitor the service. This monitoring style substantially reduce runtime overhead when comparing with embedding a model in a net service.Index Terms-Information flow, information flow control, information security, information leakage prevention, runtime overhead.

Controlling Information Flows During Software Development

“…Since the model is applied in the entire software development process, we name it PrcIFC (process IFC). The core of PrcIFC is the same as NetIFC [10] we designed before. When designing PrcIFC, we ignored the affect of viruses and Trojan horses because they belong to other research areas.…”