SE547: Summary [21/23] |
Information flow tracks the security levels of data.
Goal of information flow is to ensure noninterference: values in low security variables cannot depend on values in high security variables.
Static analysis of sequential code without timers is possible.
Static analysis of concurrent code or code with timers is much harder.
Practical information flow systems include declassification.