Integration of Static and Dynamic Analysis Techniques for Checking Noninterference

Abstract

In this article, we present an overview of recent combinations of deductive program verification and automatic test generation on the one hand and static analysis on the other hand, with the goal of checking noninterference. Noninterference is the non-functional property that certain confidential information cannot leak to certain public output, i.e., the confidentiality of that information is always preserved. We define the noninterference properties that are checked along with the individual approaches that we use in different combinations. In one use case, our framework for checking noninterference employs deductive verification to automatically generate tests for noninterference violations with an improved test coverage. In another use case, the framework provides two combinations of deductive verification with static analysis based on system dependence graphs to prove noninterference, thereby reducing the effort for deductive verification.

Combining static analysis error traces with dynamic symbolic execution (experience paper)

“…Beyond the problem of validating false positives, SA and DSE have been combined effectively for several problems, including bug finding and verification [2,13,28,49].…”