Theoretical framework of quantitative analysis based information leakage warning system

摘要

The paper aims to propose a framework of information leakage warning system based on the principle of quantitative information flow. The quantification of information leakage has been widely used to decide the threshold of information leakage in program code but the purpose of the proposed framework is to use quantification based information leakage threshold to design practical information leakage warning system for real-time software. In the proposed framework, the software is considered as a collection of functions and each function is considered as register automata. Using the register automata working principles, the information leakage will be quantified during runtime of the software and when the software is in its pristine form. Based on the quantified amount of information leakage in both the cases, the framework warns the user about information leakage. Algorithmic steps of the proposed approach are also included in the paper. The proposed quantitative analysis based framework leads to flexible information security policy.