Information Flow Analysis
Information flow analysis detects and controls how sensitive information is propagated through an application. We give a formal model of what it means for sensitive information to be revealed, as well as an extension of JML that allows for the specification of information flow concerns. We present an approach by which we can verify these JML contracts using KeY. It is based on two symbolic executions of the program.
KeywordsProgram Variable Proof Obligation Symbolic Execution Kripke Structure Method Contract
Unable to display preview. Download preview PDF.