Information Flow Analysis for File Systems and Databases Using Labels
Ehud Gudes, Luigi Vincenzo Mancini, Francesco Parisi-Presicce · Kluwer Academic Publishers eBooks · 2006
The control of information flow has been used to address problems concerning the privacy and the secrecy of data. A model based on decentralized labels extends traditional multilevel security models by allowing users to declassify information in a distributed way. We extend this decentralized labels model developed by other authors by addressing specific issues that arise in accessing files and databases and in general in I/O operations. While retaining the support for static analysis, we also include run-time checks to allow declassification with “controlled information leakage”.