Carnegie Mellon University
Ardalan Amiri Sani, Wolfgang Richter, Xuan Bao, Trevor Narayan, Mahadev Satyanarayanan, Lin Zhong, Romit Roy Choudhury · Palgrave Macmillan eBooks · 2013
Abstract. The Flume system is an implementation of decentralized information flow control (DIFC) at the operating system level. Prior work has shown Flume can be implemented as a practical ex-tension to the Linux Operating System, allowing real Web applications to achieve useful security guarantees. However, the question remains if the Flume system is actually secure. This paper com-pares Flume with other recent DIFC system like Asbestos, arguing that the latter is susceptible to wide-bandwidth covert channels, and proving Flume is not by means of a formal non-interference proof. 1