DOI QR코드

DOI QR Code

Mini x86 어셈블리어에서 보안 정보 흐름 분석

Secure Information Flow Analysis in Mini x86 Assembly Language

  • 김제민 (인하대학교 일반대학원 정보공학과) ;
  • 김기태 (인하대학교 컴퓨터정보공학부) ;
  • 유원희 (인하대학교 컴퓨터정보공학부)
  • 투고 : 2009.04.04
  • 심사 : 2009.06.17
  • 발행 : 2009.09.30

초록

This paper discuss secure information flow analysis and its visualization. Information leak is defined as existence of information flow from variables which have user's private informations to variables that anyone can access. Secure information flow analysis has been made to decide of whether the information leak is or not. There are many researches for secure information flow analysis concerning high level programming languages. But actually, programs that user executes don't have program source code represented in high level programming language. Thus there is need for analysis of program represented in low level language. More to analysis, visualization of analysis is very important. So, this paper discuss visualization of secure information flow analysis. In this paper, Mini x86 Assembly Language which is subset of x86 assembly language is defined and secure information flow analysis of program is proposed. In addition, this paper defines transfer function that is used for analysis and shows how to visualize control flow graph.

키워드