Information Inference Diagrams: Complementing Privacy and Security Analyses Beyond Data Flows
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866914115546513408 |
|---|---|
| author | Rehms, Sebastian Köpsell, Stefan Klös, Verena Tschorsch, Florian |
| author_facet | Rehms, Sebastian Köpsell, Stefan Klös, Verena Tschorsch, Florian |
| contents | This work introduces Information Inference Diagrams (I2Ds), a modeling framework aiming to complement existing approaches for privacy and security analysis of distributed systems. It is intended to support established threat modeling processes. Our approach is designed to be compatible with Data Flow Diagrams~(DFDs), which form the basis of many established techniques and tools. Unlike DFDs, I2Ds represent information propagation, going beyond mere data flows to enable more formal reasoning in threat modeling while remaining practical. They define inference and sharing (flow) relations on information items to model how information moves through a system. To this end, we provide formal definitions for information items, entities, and flows. By introducing classes as a type system, our formal rules are both generic and allow conformance to existing vocabularies. We demonstrate the applicability of I2Ds through examples, that showcase their versatility in system analysis. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2405_08356 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Information Inference Diagrams: Complementing Privacy and Security Analyses Beyond Data Flows Rehms, Sebastian Köpsell, Stefan Klös, Verena Tschorsch, Florian Cryptography and Security This work introduces Information Inference Diagrams (I2Ds), a modeling framework aiming to complement existing approaches for privacy and security analysis of distributed systems. It is intended to support established threat modeling processes. Our approach is designed to be compatible with Data Flow Diagrams~(DFDs), which form the basis of many established techniques and tools. Unlike DFDs, I2Ds represent information propagation, going beyond mere data flows to enable more formal reasoning in threat modeling while remaining practical. They define inference and sharing (flow) relations on information items to model how information moves through a system. To this end, we provide formal definitions for information items, entities, and flows. By introducing classes as a type system, our formal rules are both generic and allow conformance to existing vocabularies. We demonstrate the applicability of I2Ds through examples, that showcase their versatility in system analysis. |
| title | Information Inference Diagrams: Complementing Privacy and Security Analyses Beyond Data Flows |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2405.08356 |