Additive and multiplicative notions of leakage, and their capacities

Abstract : Protecting sensitive information from improper disclosure is a fundamental security goal. It is complicated, and difficult to achieve, often because of unavoidable or even unpredictable operating conditions that can lead to breaches in planned security defences. An attractive approach is to frame the goal as a quantitative problem, and then to design methods that measure system vulnerabilities in terms of the amount of information they leak. A consequence is that the precise operating conditions, and assumptions about prior knowledge, can play a crucial role in assessing the severity of any measured vunerability. We develop this theme by concentrating on vulnerability measures that are robust in the sense of allowing general leakage bounds to be placed on a program, bounds that apply whatever its operating conditions and whatever the prior knowledge might be. In particular we propose a theory of channel capacity, generalising the Shannon capacity of information theory, that can apply both to additive- and to multiplicative forms of a recently-proposed measure known as g-leakage. Further, we explore the computational aspects of calculating these (new) capacities: one of these scenarios can be solved efficiently by expressing it as a Kantorovich distance, but another turns out to be NP-complete. We also find capacity bounds for arbitrary correlations with data not directly accessed by the channel, as in the scenario of Dalenius's Desideratum.
Type de document :
Communication dans un congrès
27th Computer Security Foundations Symposium (CSF 2014), Jul 2014, Vienna, Austria. IEEE, pp.308--322, 2014, 〈10.1109/CSF.2014.29〉
Liste complète des métadonnées

Littérature citée [45 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-00989462
Contributeur : Catuscia Palamidessi <>
Soumis le : dimanche 11 mai 2014 - 19:11:47
Dernière modification le : jeudi 9 février 2017 - 15:14:24
Document(s) archivé(s) le : lundi 11 août 2014 - 13:31:45

Fichier

csf14.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

Citation

Mário S. Alvim, Konstantinos Chatzikokolakis, Annabelle Mciver, Carroll Morgan, Catuscia Palamidessi, et al.. Additive and multiplicative notions of leakage, and their capacities. 27th Computer Security Foundations Symposium (CSF 2014), Jul 2014, Vienna, Austria. IEEE, pp.308--322, 2014, 〈10.1109/CSF.2014.29〉. 〈hal-00989462〉

Partager

Métriques

Consultations de
la notice

627

Téléchargements du document

538