Runtime Verification of Information Flow : Policy-Based Runtime Verification of Information Flow Control

Standard security mechanism such as Access control, Firewall and Encryption only focus on controlling the release of information but no limitations are placed on controlling the propagation of that confidential information. The principle problem of controlling sensitive information confidentiality starts after access is granted. The research described in this book belongs to the constructive research field where the constructive refers to knowledge contributions being developed as a new framework, theory, model or algorithm. There is currently no monitoring mechanism for controlling information flow during runtime that support behavior configurability and User interaction. Configurability is an important requirement because what is considered to be secure today can be insecure tomorrow. The interaction with users is very important in flexible and reliable security monitoring mechanism because different users may have different security requirements. The interaction with monitoring mechanism enables the user to change program behavior or modify the way that information flows while the program is executing.