Impossibility of Precise and Sound Termination-Sensitive Security Enforcements
Explore a comprehensive analysis of termination-sensitive security enforcement mechanisms in this IEEE Symposium on Security & Privacy presentation. Delve into the challenges of implementing precise and sound security policies that consider program termination behavior influenced by confidential input. Examine the limitations of static enforcement methods and the potential of dynamic mechanisms like Secure Multi-Execution (SME). Discover the subtle distinctions between actual and observable termination in policy formulation. Learn about the impossibility of enforcing certain termination-sensitive policies in a sound and precise manner, supported by proofs involving the halting problem and diagonalization arguments. Investigate the concept of indirect termination-sensitive noninterference and its implications for security enforcement. Gain insights into the construction of a variant SME and a sound type system for indirect termination-sensitive policies. Enhance your understanding of the complexities surrounding information flow policies and their practical implementation in secure systems. Read more