Non-Uniform Distributions in Quantitative Information-Flow

Provided by: Association for Computing Machinery
Topic: Security
Format: PDF
Quantitative Information-Flow analysis (QIF) determines the amount of information that a program leaks about its secret inputs. For this, QIF requires an assumption about the distribution of the secret inputs. Existing techniques both consider the worst-case over a (sub-) set of all input distributions and thereby over-approximate the amount of leaked information; or they are tailored to reasoning about uniformly distributed inputs and are hence not directly applicable to non-uniform use-cases; or they deal with explicitly represented distributions, for which suitable abstraction techniques are only now emerging.

Find By Topic