We address the problem of characterising the security of a program against unauthorised information flows. Classical approaches are based on non-inter\-ference models which depend ultimately on the notion of process equivalence. In these models confidentiality is an absolute property stating the absence of any illegal information flow. We present a model in which the notion of non-interference is approximated in the sense that it allows for some exactly quantified leakage of information. This is characterised via a notion of process similarity which replaces the indistinguishability of processes by a quantitative measure of their behavioural difference. Such a quantity is related to the number of statistical tests needed to distinguish two ...
he formalisation of security properties for computer systems raises the problem of overcoming also i...
In this paper we introduce the notion of abstract non-interference as a general theory for reasoning...
Non-interference happens when some elements of a dynamic system do not interfere, i.e., do not a ect...
We address the problem of characterising the security of a program against unauthorised information ...
The information security community has long debated the exact definition of the term ‘security’. Eve...
The information security community has long debated the exact defini-tion of the term ‘security’. Ev...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The information security community has long debated the exact definition of the term “security”. Eve...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The information security community has long debated the exact definition of the term “security”. Eve...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
he formalisation of security properties for computer systems raises the problem of overcoming also i...
In this paper we introduce the notion of abstract non-interference as a general theory for reasoning...
Non-interference happens when some elements of a dynamic system do not interfere, i.e., do not a ect...
We address the problem of characterising the security of a program against unauthorised information ...
The information security community has long debated the exact definition of the term ‘security’. Eve...
The information security community has long debated the exact defini-tion of the term ‘security’. Ev...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The information security community has long debated the exact definition of the term “security”. Eve...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
The information security community has long debated the exact definition of the term “security”. Eve...
The formalisation of security properties for computer systems raises the problem of overcoming also ...
he formalisation of security properties for computer systems raises the problem of overcoming also i...
In this paper we introduce the notion of abstract non-interference as a general theory for reasoning...
Non-interference happens when some elements of a dynamic system do not interfere, i.e., do not a ect...