Real-time monitoring and controlling to secure information flow
Changda Wang · Journal of Communications · 2008
An information flow real-time monitoring and controlling mechanism based security automaton was proposed.The mechanism was used to prevent malicious users to get confidential information via the structural defects of program.The monitoring and controlling mechanism,which based on pushdown automaton and combined with dynamic and static analyses,used state transition with purge function to detect the security of information flow.During program execution,abstractions of program events were sent to the security automaton,which used the abstractions to track information flow.The predicate generated by security automaton controls the execution to avoid dangerous operations.The security automaton coded by C language was implemented.The results of that illustrate this method is practicable and flexible.