Sciweavers

Share
CSFW
2011
IEEE

Dynamic Enforcement of Knowledge-Based Security Policies

9 years 3 months ago
Dynamic Enforcement of Knowledge-Based Security Policies
—This paper explores the idea of knowledge-based security policies, which are used to decide whether to answer queries over secret data based on an estimation of the querier’s (possibly increased) knowledge given the results. Limiting knowledge is the goal of existing information release policies that employ mechanisms such as noising, anonymization, and redaction. Knowledge-based policies are more general: they increase flexibility by not fixing the means to restrict information flow. We enforce a knowledge-based policy by explicitly tracking a model of a querier’s belief about secret data, represented as a probability distribution, and denying any query that could increase knowledge above a given threshold. ment query analysis and belief tracking via abstract interpretation using a novel probabilistic polyhedral domain, whose design permits trading off precision with performance while ensuring estimates of a querier’s knowledge are sound. Experiments with our implementatio...
Piotr Mardziel, Stephen Magill, Michael Hicks, Mud
Added 18 Dec 2011
Updated 18 Dec 2011
Type Journal
Year 2011
Where CSFW
Authors Piotr Mardziel, Stephen Magill, Michael Hicks, Mudhakar Srivatsa
Comments (0)
books