A Partial Ordered Number System for Information Flow Control
Shih‐Chien Chou · International Journal of Information Technology and Computer Science · 2013
Information flow control models can be applied widely.This paper discusses only the models preventing information leakage during program execution.In the prevention, an informat ion flow control model dynamically monitors statements that will cause information flows and ban statements that may cause leakage.We involved in the research of informat ion flow control for years and identified that sensitive informat ion may be leaked only when it is output.However, most existing models ignore informat ion flows induced by output statements.We thus designed a new model XIFC (X informat ion flow control) that especially emphasizes the monitoring of output statements.We also designed XIFC as a precise and low runtime overhead model.To achieve this purpose, we took a different viewpoint to re-examine the features offered by existing models and extracted a necessary feature set for the design.Our experiments show that XIFC bans every non-secure information flow and substantially reduces runtime overhead when comparing with our previous work.