基于最小熵的完整性度量  

Measuring Information Integrity Using Min-entropy

作　　者：彭朝英 席政军[1] PENG Chao-ying;XI Zheng-jun(School of Computer Science,Shaanxi Normal University,Xi’an,Shaanxi 710062,China)

机构地区：[1]陕西师范大学计算机科学学院,陕西西安710062

出　　处：《电子学报》2018年第8期1822-1828,共7页Acta Electronica Sinica

基　　金：国家自然科学基金(No.61671280;No.11531009);陕西省创新人才推进计划青年科技新星项目(No.2017KJXX-92);陕西师范大学优秀青年学术骨干资助计划(No.16QNGG013);中央高校基本科研业务费专项资金(No.GK201502004)

摘　　要：在实际计算机系统中可信信息不可避免地会被更改,因此有必要定量刻画信息的完整性,目的在于度量有多少的更改是可容忍的.本文针对攻击者能够一次最大可能更改可信信息的情况,结合信息流完整性模型,将程序建模为信道,使用最小熵定量描述信息完整性.首先刻画信息完整性中的污染和抑制两种情形.基于此,进一步给出污染和信道容量之间的关系;并讨论复合程序的完整性的问题.最后,分析讨论负信息流的情况.It is possible necessary in practice to accept some ta mpering of trusted information,this motivates the development of theories of quantitative information integrity aimed at showing that some tampering are small and therefore tolerable.In this paper,we focus on the threat model that an attack will modify the trusted information as much as possible in one try.Based on the information integrity model,we use the min-entropy to quantify the trusted information by modeling aprogram as acommunication channel.We quantify the contamination and the channel suppression in information integrity.We then analyze the relationship between the contamination and the capacity of the channel,and consider the integrity in the cascade of the programs.Finally,we discuss the negative valuecase in quantitative information integrity.

关 键 词：信息流 完整性 最小熵 污染 信道抑制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]