Who Can Declassify?

Lux, Alexander; Mantel, Heiko

doi:10.1007/978-3-642-01465-9_3

Cited by 10 publications

(11 citation statements)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The prudent principles proposed by Lux and Mantel [10] for the what-dimensional declassification were proved to be suitable for the stepwise bisimulation-based security condition WHERE&WHO, but have not been adequately discussed on other declassification policies, except in our previous work [9]. The program satisfies noninterference but violates R3P because initially h = h and then μ r low μ r .…”

Section: Prudent Principles For Declassificationsmentioning

confidence: 92%

“…Similar to the monotonicity of release, the new principle can only be fulfilled when the reachable subprograms are restricted to the ones starting from reference label r where H(r, ) is not empty for a specific . The new principle is also different from weakly persistence [10] which restricts the start points at the declass commands instead of reference labels.…”

Section: Theorem 4 (Noninterference Up-to)mentioning

confidence: 97%

“…Sabelfeld and Sands [5] proposed four basic prudent principles for declassification policies as sanity checks for the existing and newly defined security properties-semantic consistency, conservativity, monotonicity of release, and non-occlusion. Several other principles were proposed by Mantel et al, such as compositionality [18], relaxation, noninterference up-to, (weakly) persistence, and protection [10]. Although these principles are not mandatory to be complied with by the security properties, they serve as important accordance for the assessment of attacker model and choice of security policy.…”

Section: Prudent Principles For Declassificationsmentioning

confidence: 97%

“…In this section, we focus on the compliance of R3P with both the basic principles and the principles given in Ref. [10]. Let P [C] be a program with C as a subprogram, and P [C /C] denotes a program derived by substituting each occurrence of C in P with C .…”

Section: Prudent Principles For Declassificationsmentioning

confidence: 99%

See 3 more Smart Citations

Automated enforcement for relaxed information release with reference points

Gao

Chen

et al. 2014

Sci. China Inf. Sci.

View full text Add to dashboard Cite

Language-based information flow security is a promising approach for enforcement of strong security and protection of the data confidentiality for the end-to-end communications. Here, noninterference is the standard and most restricted security property that completely forbids confidential data from being released to public context. Although this baseline property has been extensively enforced in various cases, there are still many programs, which are considered secure enough, violating this property in some way. In order to control the information release in these programs, the predetermined ways should be specified by means of which confidential data can be released. These intentional releases, also called declassifications, are regulated by several more relaxed security properties than noninterference. The security properties for controlled declassification have been developed on different dimensions with declassification goals. However, the mechanisms used to enforce these properties are still unaccommodating, unspecific, and insufficiently studied. In this work, a new security property, the Relaxed Release with Reference Points (R3P), is presented to limit the information that can be declassified in a program. Moreover, a new mechanism using reachability analysis has been proposed for the pushdown system to enforce R3P on programs. In order to show R3P is competent for use, it has been proved that it complies with the well-known prudent principles of declassification, and in addition finds some restrictions on our security policy. The widespread usage, precision, efficiency, and the influencing factors of our enforcement have been evaluated. CitationSun C, Xi N, Gao S, et al. Automated enforcement for relaxed information release with reference points.

show abstract

Section: Prudent Principles For Declassificationsmentioning

confidence: 92%

Section: Theorem 4 (Noninterference Up-to)mentioning

confidence: 97%

Section: Prudent Principles For Declassificationsmentioning

confidence: 97%

Section: Prudent Principles For Declassificationsmentioning

confidence: 99%

See 2 more Smart Citations

Automated enforcement for relaxed information release with reference points

Gao

Chen

et al. 2014

Sci. China Inf. Sci.

View full text Add to dashboard Cite

show abstract

“…For sequential programs, there are solutions addressing the aspects What (e.g., [29,15,16]), Where (e.g., [10,2,11]), and Who (e.g., [25,26,17]) in isolation.…”

Section: Related Workmentioning

confidence: 99%