On the Decidability of Model-Checking Information Flow Properties

  • Authors:
  • Deepak D'Souza;Raveendra Holla;Janardhan Kulkarni;Raghavendra K. Ramesh;Barbara Sprick

  • Affiliations:
  • Department of Computer Sc. & Automation, Indian Institute of Science, India;Department of Computer Sc. & Automation, Indian Institute of Science, India;Department of Computer Sc. & Automation, Indian Institute of Science, India;Department of Computer Sc. & Automation, Indian Institute of Science, India;Department of Computer Science, Modeling and Analysis of Information Systems, TU Darmstadt, Germany

  • Venue:
  • ICISS '08 Proceedings of the 4th International Conference on Information Systems Security
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Current standard security practices do not provide substantial assurance about information flow security: the end-to-end behavior of a computing system. Noninterference is the basic semantical condition used to account for information flow security. In the literature, there are many definitions of noninterference: Non-inference, Separability and so on. Mantel presented a framework of Basic Security Predicates (BSPs) for characterizing the definitions of noninterference in the literature. Model-checking these BSPs for finite state systems was shown to be decidable in [8]. In this paper, we show that verifying these BSPs for the more expressive system model of pushdown systems is undecidable. We also give an example of a simple security property which is undecidable even for finite-state systems: the property is a weak form of non-inference called WNI, which is not expressible in Mantel's BSP framework.