用数据流分析方法检查程序信息流安全

Data Flow Analysis for Checking Information Flow Security of Programs

程序信息流安全是信息安全的一个重要研究方向.基于类型的分析虽然是检查程序信息流安全的一种有效方法,但过于保守.本文尝试将传统的数据流分析方法用于程序信息流安全的检查,即利用数据流分析来跟踪程序数据间的安全依赖关系,达到检查程序信息流安全的目的.和基于类型的方法相比,数据流分析方法能更加精确地分析程序,具有更大的宽容性.最后,本文对数据流分析方法的可靠性进行了证明.

Ensuring information flow security of programs is an important research direction of information security.Typebased analysis can be used to check information flow security of programs, but they are overly conservative, This paper applies the standard technique of data flow analysis to check information flow security of programs in order to make the checking more accurately. It can statically determine how a program＇s outputs are related to its inputs, i.e. , how the former depends, directly or indirectly, on the latter. Compared with type-based analyses, the method proposed in this paper is more natural and less restrictive. Moreover, the soundness of the analysis is proved.