基于最小熵的完整性度量

在实际计算机系统中可信信息不可避免地会被更改，因此有必要定量刻画信息的完整性，目的在于度量有多少的更改是可容忍的.本文针对攻击者能够一次最大可能更改可信信息的情况，结合信息流完整性模型，将程序建模为信道，使用最小熵定量描述信息完整性.首先刻画信息完整性中的污染和抑制两种情形.基于此，进一步给出污染和信道容量之间的关系；并讨论复合程序的完整性的问题.最后，分析讨论负信息流的情况.

Measuring Information Integrity Using Min-entropy

It is possible necessary in practice to accept some tampering of trusted information,this motivates the development of theories of quantitative information integrity aimed at showing that some tampering are small and therefore tolerable.In this paper,we focus on the threat model that an attack will modify the trusted information as much as possible in one try.Based on the information integrity model,we use the min-entropy to quantify the trusted information by modeling a program as a communication channel.We quantify the contamination and the channel suppression in information integrity.We then analyze the relationship between the contamination and the capacity of the channel,and consider the integrity in the cascade of the programs.Finally,we discuss the negative value case in quantitative information integrity.