Diana Initiative 2021-Mireya Jurado-Eww You're Leaking: A Formal Introduction to Information Leakage
Channel: The Diana Initiative
Date: 12/08/2021

Diana Initiative 2021
Mireya Jurado
Eww You're Leaking: A Formal Introduction to Information Leakage

As security practitioners, we often hear terms like â€œleaksâ€ and â€œleakageâ€ and while some of us have a general notion about what leakage is, there is an established academic framework dedicated to studying information leakage called quantitative information flow (QIF). QIF can help us develop a better understanding of what leakage is, how we can measure it, and how we can build systems with leakage in mind. In this talk, I will introduce the formal concept of information leakage using examples from password checkers to specialized cryptography. What do we mean by leakage and how can we improve security by thinking about it?