Poster: Channels and the Information Order

Protecting confidential information from improper disclosure is a fundamental security goal, made more challenging due to the practical difficulty of preventing all leakage of secret information. For instance, a login program that rejects an incorrect password unavoidably reveals that the secret password differs from the one that was entered. One promising way to address information leakage is to consider it quantitatively, based on the intuition that a login program is acceptable in practice because it leaks only a “small” amount of information about the secret password. This viewpoint has led to the area of quantitative information flow, which has seen growing interest in the past decade. (See, for example [1], [2], [3].)