The Science of Quantitative Information Flow

Mário S. Alvim is an assistant professor in the Computer Science Department of the Universidade Federal de Minas Gerais (UFMG) in Belo Horizonte. His current research interests include quantitative information flow and, in particular, its potential applications to fields other than security. Kostas Chatzikokolakis is a CNRS researcher at the École Polytechnique of Paris. He works on security and privacy, in particular quantitative information flow, location privacy and differential privacy. Annabelle McIver is a professor in the Department of Computing at Macquarie University in Sydney. She works on mathematical techniques for the verification of probabilistic systems. Carroll Morgan is a professor in the School of Engineering and Computer Science at the University of New South Wales, and is affiliated with the Trustworthy Systems Group of the CSIRO's Data61. His current interests are quantitative information flow, program derivation (including security) and proved correctness of multi-core operating-system kernels. Catuscia Palamidessi is director of research at INRIA Saclay. She is the leader of COMETE, a research team in the INRIA and École Polytechnique shared lab. Her main research interests are quantitative information flow, privacy, and concurrency theory. Geoffrey Smith is a professor in the School of Computing and Information Sciences of Florida International University in Miami. His current research interests include quantitative information flow and its applications to cryptography.

Part I, Motivation.- Introduction.- Part II, Secrets and How to Measure Them.- Modeling Secrets.- On g-Vulnerability.- Part III, Channels and Information Leakage.- Channels.- Posterior Vulnerability and Leakage.- Robustness.- Capacity.- Composition of Channels.- Refinement.- The Dalenius Perspective.- Axiomatics.- The Geometry of Hypers, Gains, and Losses.- Part IV, Information Leakage in Sequential Programs.- Quantitative Information Flow in Sequential Computer Programs.- Hidden-Markov Modeling of QIF in Programs.- Program Algebra for QIF.- Iteration and Non-termination.- A Demonic Lattice of Information.- Part V, Applications.- The Crowds Protocol.- Timing Attacks on Blinded and Bucketed Cryptography.- Defense Against Side Channels.- Multi-party Computation: The Three Judges Protocol.- Voting Systems.- Differential Privacy.- Glossary and Index.