Title
What's the Over/Under? Probabilistic Bounds on Information Leakage.
Abstract
Quantitative information flow (QIF) is concerned with measuring how much of a secret is leaked to an adversary who observes the result of a computation that uses it. Prior work has shown that QIF techniques based on abstract interpretation with probabilistic polyhedra can be used to analyze the worst-case leakage of a query, on-line, to determine whether that query can be safely answered. While this approach can provide precise estimates, it does not scale well. This paper shows how to solve the scalability problem by augmenting the baseline technique with sampling and symbolic execution. We prove that our approach never underestimates a query's leakage (it is sound), and detailed experimental results show that we can match the precision of the baseline technique but with orders of magnitude better performance.
Year
Venue
DocType
2018
POST
Conference
Volume
Citations 
PageRank 
abs/1802.08234
0
0.34
References 
Authors
0
5
Name
Order
Citations
PageRank
Ian Sweet131.76
Jose Manuel Calderon Trilla200.34
Chad Scherrer300.68
Michael Hicks4162.39
Stephen Magill5833.54