Comparative Analysis of Leakage Tools on Scalable Case Studies

Fabrizio Biondi (1) , Axel Legay (1) , Jean Quilbeuf (1)

1 ESTASYS - Efficient STAtistical methods in SYstems of systems

Quantitative security techniques have been proven effective to measure the security of systems against various types of attackers. However, such techniques are often tested against small-scale academic examples. In this paper we use analyze two scalable, real life privacy case studies: the privacy of the energy consumption data of the users of a smart grid network and the secrecy of the voters' voting preferences with different types of voting protocols. We analyze both case studies with three state-of-the-art information leakage computation tools: LeakWatch, Moped-QLeak, and our tool QUAIL equipped with a new trace analysis algorithm. We highlight the relative advantages and drawbacks of the tools and compare their usability and effectiveness in analyzing the case studies.

Domaines: Cryptographie et sécurité [cs.CR]

Fabrizio Biondi, Axel Legay, Jean Quilbeuf. Comparative Analysis of Leakage Tools on Scalable Case Studies. 22nd International SPIN Workshop on Model Checking of Software, Aug 2015, Stellenbosch, South Africa. ⟨10.1007/978-3-319-23404-5_17⟩. ⟨hal-01241352⟩