Abstract: Two kinds of integrity measures-contamination and suppression-are introduced. Contamination measures how much untrusted information reaches trusted outputs; it is the dual of information-flow confidentiality. Suppression measures how much information is lost from outputs; it does not have a confidentiality dual. Two forms of suppression are considered: programs and channels. Program suppression measures how much information about the correct output of a program is lost because of attacker influence and implementation errors. Channel suppression measures how much information about inputs to a noisy channel is missing from channel outputs. The relationship between quantitative integrity, confidentiality, and database privacy is examined.
Clarkson and Schneider REF propose contamination and suppression as quantitative definitions of integrity.
Quantification of Integrity
2010 23rd IEEE Computer Security Foundations Symposium
2010 23rd IEEE Computer Security Foundations Symposium
Computer Science