From the Sand Point of View. Declassification exercises. A devolutionary thought. Other names. On the contrary. A fair mistake. The creative repetition.
Noninterference is a high-level security property that guarantees the absence of illicit information flow at runtime. Noninterferencecan be enforced statically using information flow type systems; however, these are criticized for being... more
Noninterference is a high-level security property that guarantees the absence of illicit information flow at runtime. Noninterferencecan be enforced statically using information flow type systems; however, these are criticized for being overly conservative and rejecting secure programs. More precision can be achieved by using program logics, but such an approach lacks its own verification tools. In this work we propose a novel, alternative approach: utilizing symbolic execution in combination with ideas from program logics in an attempt to increase the precision of analyses and automate noninterference testing. Dealing with policies incorporating declassification is also explored. The feasibility of the proposal is illustrated using a prototype tool based on the KLEE symbolicexecution engine.
