Sound and Precise Cross-Layer Data Flow Tracking

  • Enrico Lovat
  • Martín Ochoa
  • Alexander Pretschner
Conference paper

DOI: 10.1007/978-3-319-30806-7_3

Part of the Lecture Notes in Computer Science book series (LNCS, volume 9639)
Cite this paper as:
Lovat E., Ochoa M., Pretschner A. (2016) Sound and Precise Cross-Layer Data Flow Tracking. In: Caballero J., Bodden E., Athanasopoulos E. (eds) Engineering Secure Software and Systems. ESSoS 2016. Lecture Notes in Computer Science, vol 9639. Springer, Cham

Abstract

We connect runtime monitors for data flow tracking at different abstraction layers (a browser, a mail client, an operating system) and prove the soundness of this generic model w.r.t. a formal notion of explicit information flow. This allows us to (1) increase the precision of the analysis by exploiting the high-level semantics of events at higher levels of abstraction and (2) provide system-wide guarantees at the same time. For instance, using our model, we can soundly reason about the flow of a picture from the network through a browser into a cache file or a window on the screen by combining analyses at multiple layers.

Copyright information

© Springer International Publishing Switzerland 2016

Authors and Affiliations

  • Enrico Lovat
    • 1
  • Martín Ochoa
    • 2
  • Alexander Pretschner
    • 1
  1. 1.Technische Universität MünchenMunichGermany
  2. 2.Singapore University of Technology and DesignSingaporeSingapore

Personalised recommendations