A Formal Model and Practical Technique for Quantifying Information Leakage in Software

Add to your list(s) Download to your calendar using vCal

• Chris Novakovic, University of Birmingham
• Wednesday 30 April 2014, 11:00-12:00
• Room 245, School of Computer Science.

If you have a question about this talk, please contact Matthijs Melissen.

Information leakage occurs when something about a system’s secret data can be deduced from observing its public outputs. In this talk, I will present a formal model of information leakage, based on discrete-time Markov chains, that models the information leaked about some secret data to an attacker with access to a program’s source code and public outputs. I will also present and demonstrate a practical implementation of this model that estimates (rather than precisely computes) information leakage in Java software, and will show that this implementation gives fast and accurate approximations of the true leakage that occurs in a program.

This talk is part of the Computer Security Seminars series.

This talk is included in these lists:

• Computer Science Departmental Series
• Computer Science Distinguished Seminars
• Computer Security Seminars
• Room 245, School of Computer Science

Note that ex-directory lists are not shown.