Automatic Discovery and Quantification of Information Leaks

No abstract is available for this paper.

• Publication year

  2009

• Venue

  IEEE Symposium on Security and Privacy

• Publication date

  2009-05-17

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1109/SP.2009.18
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• On the Foundations of Quantitative Information Flow

  2009cited by this paper
• Compositional shape analysis by means of bi-abduction

  2009cited by this paper
• Expressive Declassification Policies and Modular Static Enforcement

  2008cited by this paper
• Quantitative information flow as network flow capacity

  2008cited by this paper
• Array Abstractions from Proofs

  2007cited by this paper
• ARMC: The Logical Choice for Software Model Checking with Abstraction Refinement

  2007cited by this paper
• Assessing security threats of looping constructs

  2007cited by this paper
• An information-theoretic model for adaptive side-channel attacks

  2007influential reference
• A static analysis for quantifying information flow in a simple imperative language

  2007cited by this paper
• Termination proofs for systems code

  2006cited by this paper
• A logic for information flow in object-oriented programs

  2006cited by this paper
• A Mathematical Theory of Communication

  2006cited by this paper
• Combining type-based analysis and model checking for finding counterexamples against non-interference

  2006cited by this paper
• Timing-Sensitive Information Flow Analysis for Synchronous Systems

  2006cited by this paper
• Secure Information Flow as a Safety Problem

  2005cited by this paper
• A Theorem Proving Approach to Analysis of Secure Information Flow

  2005cited by this paper
• Quantitative Information Flow, Relations and Polymorphic Types

  2005cited by this paper
• SATABS: SAT-Based Predicate Abstraction for ANSI-C

  2005cited by this paper
• Belief in information flow

  2005cited by this paper
• Dimensions and principles of declassification

  2005cited by this paper
• Abstractions from proofs

  2004cited by this paper
• Abstract non-interference: parameterizing non-interference by abstract interpretation

  2004cited by this paper
• A Model for Delimited Information Release

  2003cited by this paper
• Language-based information-flow security

  2003cited by this paper
• Quantifying information flow

  2002cited by this paper
• Robust declassification

  2001cited by this paper
• Automatic predicate abstraction of C programs

  2001cited by this paper
• Construction of Abstract State Graphs with PVS

  1997cited by this paper
• Entropy measures and unconditional security in cryptography

  1997cited by this paper
• Guessing and entropy

  1994cited by this paper
• A polynomial time algorithm for counting integral points in polyhedra when the dimension is fixed

  1993cited by this paper
• Toward a Mathematical Foundation for Information Flow Security

  1991cited by this paper
• Information flow in nondeterministic systems

  1990cited by this paper
• Information Theory

  1987cited by this paper
• Covert Channel Capacity

  1987cited by this paper
• Cryptography and Data Security

  1982cited by this paper
• The Omega Project

  1978cited by this paper
• Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints

  1977cited by this paper

• Vul2image: A Quick Image-inspired and CNN-based Vulnerability Detection system

  2026cites this paper
• A scalable entropy estimator

  2025cites this paper
• Enhanced Vulnerability Localization: Harmonizing Task-Specific Tuning and General LLM Prompting

  2025cites this paper
• A Scalable Vulnerability Detection System with Multi-View Graph Representations

  2025cites this paper
• Abundant Modalities Offer More Nutrients: Multi-Modal-Based Function-Level Vulnerability Detection

  2025cites this paper
• HGAN4VD: Leveraging Heterogeneous Graph Attention Networks for enhanced Vulnerability Detection

  2025cites this paper
• Lightweight Multi-Tenant Security Isolation for Resource-Constrained Edge Computing Platforms: A Theoretical Framework

  2025cites this paper
• Accountability, Involvement, and Mediation for Information Flow

  2025cites this paper
• Gray-box runtime enforcement of hyperproperties

  2025cites this paper
• Scalable Precise Computation of Shannon Entropy

  2025cites this paper
• PolySys: an Algebraic Leakage Attack Engine

  2025cites this paper
• More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services

  2024cites this paper
• Software Security Analysis in 2030 and Beyond: A Research Roadmap

  2024cites this paper
• How About Bug-Triggering Paths? - Understanding and Characterizing Learning-Based Vulnerability Detectors

  2024cites this paper
• MSGVUL: Multi-semantic integration vulnerability detection based on relational graph convolutional neural networks

  2024cites this paper
• Obtaining Information Leakage Bounds via Approximate Model Counting

  2023influential citation
• CEVulDet: A Code Edge Representation Learnable Vulnerability Detector

  2023cites this paper
• Sound Symbolic Execution via Abstract Interpretation and its Application to Security

  2023cites this paper
• Information-Theoretic Testing and Debugging of Fairness Defects in Deep Neural Networks

  2023cites this paper
• Function-Level Vulnerability Detection Through Fusing Multi-Modal Knowledge

  2023cites this paper
• Symbolic Predictive Cache Analysis for Out-of-Order Execution

  2022influential citation
• VulCNN: An Image-inspired Scalable Vulnerability Detection System

  2022cites this paper
• Path-sensitive code embedding via contrastive learning for software vulnerability detection

  2022cites this paper
• PREACH: A Heuristic for Probabilistic Reachability to Identify Hard to Reach Statements

  2022cites this paper
• HAMRAZ: Resilient Partitioning and Replication

  2022cites this paper
• Quantifying Permissiveness of Access Control Policies

  2022cites this paper
• ANOSY: approximated knowledge synthesis with refinement types for declassification

  2022influential citation
• A Scalable Shannon Entropy Estimator

  2022cites this paper
• Secure-by-Construction Synthesis of Cyber-Physical Systems

  2022cites this paper
• Quantifying Information Leakage of Probabilistic Programs Using the PRISM Model Checker

  2021cites this paper
• Revizor: Testing Black-Box CPUs Against Speculation Contracts

  2021cites this paper
• DeepWukong

  2021cites this paper
• QFuzz: quantitative fuzzing for side channels

  2021influential citation
• Abacus: Precise Side-Channel Analysis

  2021cites this paper
• Interpretable noninterference measurement and its application to processor designs

  2021cites this paper
• Quantitative estimation of side-channel leaks with neural networks

  2021cites this paper
• Boosting the Capability of Intelligent Vulnerability Detection by Training in a Human-Learning Manner

  2021cites this paper
• Upper Bound Computation of Information Leakages for Unbounded Recursion

  2021cites this paper
• Secure Evaluation of Knowledge Graph Merging Gain

  2021cites this paper
• Probabilistic Abstract Interpretation: Sound Inference and Application to Privacy

  2020cites this paper
• Bucketing and information flow analysis for provable timing attack mitigation

  2020influential citation
• CPU Elasticity to Mitigate Cross-VM Runtime Monitoring

  2020cites this paper
• PASAPTO: Policy-aware Security and Performance Trade-off Analysis--Computation on Encrypted Data with Restricted Leakage

  2020cites this paper
• A Framework for Using Deep Learning to Detect Software Vulnerabilities

  2020cites this paper
• Computer Aided Verification: 32nd International Conference, CAV 2020, Los Angeles, CA, USA, July 21–24, 2020, Proceedings, Part I

  2020influential citation
• Verified Software. Theories, Tools, and Experiments: 11th International Conference, VSTTE 2019, New York City, NY, USA, July 13–14, 2019, Revised Selected Papers

  2020cites this paper
• Counting the Number of Solutions to Constraints

  2020cites this paper
• Verification of Quantitative Hyperproperties Using Trace Enumeration Relations

  2020cites this paper
• Secure Service Composition with Quantitative Information Flow Evaluation in Mobile Computing Environments

  2019cites this paper
• Accurate String Constraints Solution Counting with Weighted Automata

  2019cites this paper
• Subformula Caching for Model Counting and Quantitative Program Analysis

  2019cites this paper
• Efficient Detection and Quantification of Timing Leaks with Neural Networks

  2019cites this paper
• Quantitative Mitigation of Timing Side Channels

  2019cites this paper
• Quantifying Information Leakage Using Model Counting Constraint Solvers

  2019cites this paper
• On Aggregation of Information in Timing Attacks

  2019cites this paper
• Sleak: automating address space layout derandomization

  2019cites this paper
• Data-Driven Debugging for Functional Side Channels

  2018cites this paper
• On the Additive Capacity Problem for Quantitative Information Flow

  2018cites this paper
• What's the Over/Under? Probabilistic Bounds on Information Leakage

  2018cites this paper
• Hybrid statistical estimation of mutual information and its application to information flow

  2018cites this paper
• Analyse of real-time systems from scheduling perspective. (Analyse des systèmes temps réel de point de vue ordonnancement)

  2018cites this paper
• Symbolic Verification of Cache Side-Channel Freedom

  2018cites this paper
• Scalable Approximation of Quantitative Information Flow in Programs

  2018influential citation
• Model Counting: A Novel Approach for Quantification of Information Leaks

  2018cites this paper
• SySeVR: A Framework for Using Deep Learning to Detect Software Vulnerabilities

  2018cites this paper
• Parameterized model counting for string and numeric constraints

  2018cites this paper
• Studying Maximum Information Leakage Using Karush-Kuhn-Tucker Conditions

  2018cites this paper
• Practical dynamic information flow control

  2018cites this paper
• Information Leakage in Arbiter Protocols

  2018cites this paper
• Static Evaluation of Noninterference Using Approximate Model Counting

  2018cites this paper
• Online Synthesis of Adaptive Side-Channel Attacks Based On Noisy Observations

  2018cites this paper
• Model Checking Quantitative Hyperproperties

  2018cites this paper
• Principles of Security and Trust

  2018cites this paper
• Model Counting for Recursively-Defined Strings

  2017cites this paper
• Security by compilation: an automated approach to comprehensive side-channel resistance

  2017cites this paper
• The Meaning of Memory Safety

  2017cites this paper
• Automatic detection and demonstrator generation for information flow leaks in object-oriented programs

  2017cites this paper
• A Methodology For Micro-Policies

  2017cites this paper
• A Dynamic Risk-Based Access Control Approach: Model and Implementation

  2017cites this paper
• What ’ s the Over / Under ? Probabilistic Bounds on Information Leakage

  2017cites this paper
• Combining Differential Privacy and Mutual Information for Analyzing Leakages in Workflows

  2017cites this paper
• Automated Security Analysis of Web Application Technologies

  2017cites this paper
• Quantifying the information leak in cache attacks via symbolic execution

  2017cites this paper
• Detection and Exploitation of Information Flow Leaks

  2017influential citation
• Model-Counting Approaches for Nonlinear Numerical Constraints

  2017cites this paper
• A Systematic Study of Cache Side Channels Across AES Implementations

  2017cites this paper
• Information Leakage as a Scheduling Resource

  2017cites this paper
• Conceptualizing the silent risk of inadvertent information leakages

  2017cites this paper
• Synthesis of Adaptive Side-Channel Attacks

  2017cites this paper
• Maximum Model Counting

  2017cites this paper
• Static detection of asymptotic resource side-channel vulnerabilities in web applications

  2017cites this paper
• Inferring Secrets by Guided Experiments

  2017influential citation
• Constraint normalization and parameterized caching for quantitative program analysis

  2017cites this paper
• Constraint Normalization and Parameterized Caching for antitative Program Analysis

  2017cites this paper
• Critical Systems: Formal Methods and Automated Verification

  2017influential citation
• Quantification of Secrecy in Partially Observed Stochastic Discrete Event Systems

  2017cites this paper
• Hypercollecting semantics and its application to static analysis of information flow

  2016cites this paper
• Automatic static analysis of software performance

  2016cites this paper
• Hybrid Statistical Estimation of Mutual Information for Quantifying Information Flow

  2016cites this paper
• A severity-based quantification of data leakages in database systems

  2016cites this paper