Strict Control Dependence and Its Effect on Dynamic Information Flow Analyses

Program control dependence has substantial impact on applications such as dynamic information flow tracking and data lineage tracing (a technique tracking the set of inputs that affects individual outputs). Without considering control dependence, information can leak via implicit channels without being tracked; important inputs may be absent from output lineage. However, considering control dependence may lead to a large volume of false alarms in information flow tracking or undesirably large lineage sets. The authors identify a special type of control dependence called Strict Control Dependence (SCD).