Hybrid Information Flow Monitoring Against Web Tracking

Frédéric Besson 1 Nataliia Bielova 1 Thomas Jensen 1
1 CELTIQUE - Software certification with semantic analysis
IRISA-D4 - LANGAGE ET GÉNIE LOGICIEL, Inria Rennes – Bretagne Atlantique
Abstract : Motivated by the problem of stateless web tracking (fingerprinting), we propose a novel approach to hybrid information flow monitoring by tracking the knowledge about secret variables using logical formulae. This knowledge representation helps to compare and improve precision of hybrid infor- mation flow monitors. We define a generic hybrid monitor parametrised by a static analysis and derive sufficient conditions on the static analysis for sound- ness and relative precision of hybrid monitors. We instantiate the generic monitor with a combined static constant and dependency analysis. Several other hybrid monitors including those based on well-known hybrid techniques for information flow control are formalised as instances of our generic hybrid monitor. These monitors are organised into a hierarchy that establishes their relative precision. The whole framework is accompanied by a formalisation of the theory in the Coq proof assistant.
Document type :
Conference papers
Complete list of metadatas

Cited literature [30 references]  Display  Hide  Download

https://hal.inria.fr/hal-00924138
Contributor : Frédéric Besson <>
Submitted on : Monday, January 6, 2014 - 2:41:53 PM
Last modification on : Friday, November 16, 2018 - 1:37:45 AM
Long-term archiving on : Thursday, April 10, 2014 - 4:41:04 PM

File

hybrid_information_flow_monito...
Files produced by the author(s)

Identifiers

Citation

Frédéric Besson, Nataliia Bielova, Thomas Jensen. Hybrid Information Flow Monitoring Against Web Tracking. CSF - 2013 IEEE 26th Computer Security Foundations Symposium, 2013, New Orleans, United States. ⟨10.1109/CSF.2013.23⟩. ⟨hal-00924138⟩

Share

Metrics

Record views

2684

Files downloads

380