Specifying and enforcing a fine-grained information flow policy : model and experiments

Valérie Viet Triem Tong; Andrew Clark; Ludovic Mé

Specifying and enforcing a fine-grained information flow policy : model and experiments

Valérie Viet Triem Tong ¹ Andrew Clark ² Ludovic Mé ¹

2 QUT - Queensland University of Technology [Brisbane]

Abstract : In this paper we present a model for defining and enforcing a fine-grained information flow policy. We describe how the policy can be enforced on a typical computer and present experiments using the proposed model. A key feature of the model is that it allows the expression of rules which detail precisely which information elements are allowed to mix together. For example, the model allows the expression of a policy which forbids a doctor from mixing the personal medical details of the patients. The enforcement mechanisms tracks and records information flows within the system so that dynamic changes to the policy can be made with respect to information elements which may have propagated to different locations in the system.

Document type :

Journal articles

Domain :

Computer Science [cs] / Cryptography and Security [cs.CR]

Complete list of metadatas

https://hal-supelec.archives-ouvertes.fr/hal-00516672
Contributor : Myriam Andrieux <>
Submitted on : Friday, September 10, 2010 - 3:48:59 PM
Last modification on : Monday, October 7, 2019 - 4:36:08 PM

Specifying and enforcing a fine-grained information flow policy : model and experiments

Identifiers

Collections

Citation

Export

Metrics

505

Contact

Specifying and enforcing a fine-grained information flow policy : model and experiments

Identifiers

Collections

Citation

Export

Share

Metrics

505

Contact