Poster : Channels and the Information Order

Protecting confidential information from improper disclosure is a fundamental security goal, made more challenging due to the practical difficulty of preventing all leakage of s ecret information. For instance, a login program that rejects an i ncorrect password unavoidably reveals that the secret passw ord differs from the one that was entered. One promising way to address information leakage is to consider it quantitatively, based on the intuition that a login program is acceptable in practice because it leaks only a “small” amount of informati on about the secret password. This viewpoint has led to the area of quantitative information flow, which has seen growing interest in the past decade. (See, for example [1], [2], [3].)