Reconciling Belief and Vulnerability in Information Flow

Sardaouna Hamadou 1 Vladimiro Sassone 1 Catuscia Palamidessi 2
1 ECS Department - University of Southampton
2 COMETE - Concurrency, Mobility and Transactions
LIX - Laboratoire d'informatique de l'École polytechnique [Palaiseau], Inria Saclay - Ile de France, X - École polytechnique, CNRS - Centre National de la Recherche Scientifique : UMR7161
Abstract : Belief and vulnerability have been proposed recently to quantify information flow in security systems. Both concepts stand as alternatives to the traditional approaches founded on Shannon entropy and mutual information, which were shown to provide inadequate security guarantees. In this paper we unify the two concepts in one model so as to cope with (potentially inaccurate) attackers' extra knowledge. To this end we propose a new metric based on vulnerability that takes into account the adversary's beliefs.
Type de document :
Communication dans un congrès
31st IEEE Symposium on Security and Privacy, May 2010, Berleley/Oakland, California, United States. IEEE Computer Society, pp.79-92, 2010, 〈10.1109/SP.2010.13〉
Liste complète des métadonnées

Littérature citée [35 références]  Voir  Masquer  Télécharger
https://hal.inria.fr/inria-00548007
Contributeur : Catuscia Palamidessi <>
Soumis le : dimanche 19 décembre 2010 - 19:47:31
Dernière modification le : jeudi 10 mai 2018 - 02:06:42
Document(s) archivé(s) le : lundi 5 novembre 2012 - 14:35:44

Fichier

BANDV.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

INRIA | LIX | X | PARISTECH | X-LIX | X-DEP-INFO

Citation

Sardaouna Hamadou, Vladimiro Sassone, Catuscia Palamidessi. Reconciling Belief and Vulnerability in Information Flow. 31st IEEE Symposium on Security and Privacy, May 2010, Berleley/Oakland, California, United States. IEEE Computer Society, pp.79-92, 2010, 〈10.1109/SP.2010.13〉. 〈inria-00548007〉

Exporter

BibTeX TEI DC DCterms EndNote

Partager

Métriques

Consultations de la notice

363

Téléchargements de fichiers

170

Contact


archive-ouverte@inria.fr