SE547: Sequential noninterference [4/23] |
Informal idea behind noninterference (make this formal later):
A program P satisfies noninterference if the contents of low security variables after running P is independent of the contents of high security variables before running P
Which of the following satisfy noninterference?