What is intransitive noninterference?

Abstract

The

Noninterference Analysis of Delegation Subterfuge in Distributed Authorization Systems

“…* =⇒ Reese from Mike and offers this, along with Reese resell.r. 20 =⇒ Eve, as proof to Harry that she is authorized for this rate at his hotel.…”

“…Reese issues a certificate for Reese resell.r. 20 =⇒ Eve. However, Eve obtains the intercepted certificate Harry resell.r.…”

“…Investigating the relationships between subterfuge and probing, and their relationship to information flow properties in general is an ongoing topic of research [2]. One avenue of interest is whether intransitive information flow [8,13,20] might provide an interpretation for conditional subterfuge-freedom. In this case, a principal may declare that it is willing to accept accountability for some third-party's permission with the consequence that any perturbation to its delegation state prior to the declaration can be safely ignored.…”

“…20 =⇒ Reese can be used by Eve to obtain a room at Harry's hotel for $20. Furthermore, design of the permission harry.com/resell.r.…”

Analysing the Information Flow Properties of Object-Capability Patterns

“…RCFNDC is equivalent when applied to deterministic processes to a number of standard information flow properties, including [16] at least all those that are no stronger than Roscoe's Lazy Independence [14,Section 12.4] and no weaker than Ryan's traces formulation of noninterference [18,Equation 1]. Therefore, we adopt Weakened RCFNDC and its associated automatic refinement check [12] to test for information flow here.…”