On the Foundations of Quantitative Information Flow.¶
Smith, G. (2009). On the Foundations of Quantitative Information Flow. Foundations of Software Science and Computational Structures (FoSSaCS 2009).
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Side Channel Attack
- Reasoning about a system side-channel-wise licenses several moves the access-control frame does not. Threat-model expansion presumes the adversary measures everything cheap to measure, not only what was explicitly designated as output. Information-flow accounting tracks data dependencies on secret variables through every observable, not just declared outputs — constant-time programming being the discipline of refusing data-dependent branches or memory accesses. Channel-capacity bounding recognizes that even when leakage cannot be eliminated, its bandwidth can be bounded, so a one-bit-per-hour channel may be acceptable where a one-megabit-per-second channel is not.
This sourceEstablishes a min-entropy-based measure of how many bits a system leaks about a secret — the quantitative-information-flow basis for bounding side-channel capacity rather than assuming leakage is zero.
- Reasoning about a system side-channel-wise licenses several moves the access-control frame does not. Threat-model expansion presumes the adversary measures everything cheap to measure, not only what was explicitly designated as output. Information-flow accounting tracks data dependencies on secret variables through every observable, not just declared outputs — constant-time programming being the discipline of refusing data-dependent branches or memory accesses. Channel-capacity bounding recognizes that even when leakage cannot be eliminated, its bandwidth can be bounded, so a one-bit-per-hour channel may be acceptable where a one-megabit-per-second channel is not.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:e932831e06f7 · see in the full table