Research On Detection Of Information Flow Security Based On Static Analysis

With the development of information technology, information systems are applied topractice more frequently in society. Information systems bring us the extreme convenient,but with potential security problems. There are two common ways to protect the securityof a system: access control and information flow analysis, which are complementary andfocus on different aspect. While the research of access control is mature and applied inpractice for a long time, research of information flow is hard to apply till now. Therefore,detection of violation operation of information is particularly important.After describe the definitions and classifies of information flow, conclude thecurrent situation of the research at home and abroad, compared the dynamic informationflow analysis method with the static information flow analysis method, conclude theadvantages and disadvantages of these two categories methods, and give the theoreticaldefinitions and concepts of detection in information flow field, according to the problemof conservation and hard to take practice of traditional static analysis method, a newapproach of static information analysis which converts the dynamic method to staticmethod is presented. This approach may overcome the high overhead in dynamicinformation flow analysis and solve the inaccurate problem in static information flowanalysis.Based on the algorithm above, this paper provides design and implement of aprototype system. Describes the main module and data structure in detail, takes a deepanalysis of the core module, discusses some sub algorithms may influence the efficiencyof the prototype system, and proves the correctness of system and indicates theadvantages listed above through the analysis in experiment result.