Section: New Software and Platforms

LeakWatch: Estimating Information Leakage from Java Programs

Participant : Yusuke Kawamoto.

http://www.cs.bham.ac.uk/research/projects/infotools/leakwatch/

Comète contributed to the development of LeakWatch, a quantitative information leakage analysis tool for the Java programming language, created by several people at the University of Birmingham.

LeakWatch is based on a flexible "point-to-point" information leakage model, where secret and publicly-observable data may occur at any time during a program's execution. LeakWatch repeatedly executes a Java program containing both secret and publicly-observable data and uses robust statistical techniques to provide estimates, with confidence intervals, for min-entropy leakage (using a new theoretical result from [23] ) and mutual information.