Tata Institute of Fundamental Research
Secure Information Flow: Formal Modelling, Analysis and Practical Applications
Seminar
Speaker:
N.V. Narendrakumar (School of Technology and Computer Science
Tata Institute of Fundamental Research
Homi Bhabha Road
Navy Nagar
Mumbai 400005)
Organiser:
John Barretto
Date:
Friday, 2 May 2014, 14:30 to 16:00
Venue:
D-405 (D-Block Seminar Room)
(Scan to add to calendar)
Abstract:
Abstract: For more than 3 decades now, it is well understood that several desirable security properties of systems can be cast in terms of information flows. In particular, information flow control is widely regarded as a very useful tool for the analysis and enforcement of end-to-end security properties in the dynamic setting of mobile and distributed systems. With cloud becoming the new computing paradigm, a lot of research effort is directed towards overcoming the challenges in translating the simple and elegant theory of information flow control into practical tools in the form of programming languages and systems. Although a variety of tools based on information flow control already exist for addressing issues related to specific applications, a clean unified formal model is highly desirable.
In this talk, we (i) introduce the basic concepts of information flow control, (ii) present a process calculus enriched with information flow notions together with algorithms for reasoning about security properties in this calculus and (iii) demonstrate the applications of our approach using Linux security as an example.
| Speaker: | N.V. Narendrakumar (School of Technology and Computer Science Tata Institute of Fundamental Research Homi Bhabha Road Navy Nagar Mumbai 400005) |
| Organiser: | John Barretto |
| Date: | Friday, 2 May 2014, 14:30 to 16:00 |
| Venue: | D-405 (D-Block Seminar Room) |
(Scan to add to calendar)
Abstract:
Abstract: For more than 3 decades now, it is well understood that several desirable security properties of systems can be cast in terms of information flows. In particular, information flow control is widely regarded as a very useful tool for the analysis and enforcement of end-to-end security properties in the dynamic setting of mobile and distributed systems. With cloud becoming the new computing paradigm, a lot of research effort is directed towards overcoming the challenges in translating the simple and elegant theory of information flow control into practical tools in the form of programming languages and systems. Although a variety of tools based on information flow control already exist for addressing issues related to specific applications, a clean unified formal model is highly desirable.
In this talk, we (i) introduce the basic concepts of information flow control, (ii) present a process calculus enriched with information flow notions together with algorithms for reasoning about security properties in this calculus and (iii) demonstrate the applications of our approach using Linux security as an example.
In this talk, we (i) introduce the basic concepts of information flow control, (ii) present a process calculus enriched with information flow notions together with algorithms for reasoning about security properties in this calculus and (iii) demonstrate the applications of our approach using Linux security as an example.