Privacy Enforcement for Third-Party Software (B01)

• Subject Area: Software Engineering and Programming Languages
• Term: from 2016 to 2019
• Project identifier: Deutsche Forschungsgemeinschaft (DFG) - Project number 272573906

User privacy is often not honored by third-party software applications. We envision a mechanism that enforces precise information flow restrictions, for example, ¿Do not transmit any audio before a call is initiated and after it has been completed¿, formalized in logics for temporal hyperproperties. We will identify the enforceable sublogic of HyperCTL*. We will investigate a wide spectrum of enforcement algorithms, partition applications according to the principle of least privilege for more efficient enforcement, and evaluate our enforcement mechanisms on representative Web and mobile apps with complex information flow properties and privacy guarantees.

• DFG Programme: Collaborative Research Centres
• Subproject of: SFB 1223: Methods and Tools for Understanding and Controlling Privacy
• Applicant Institution: Universität des Saarlandes
• Project Heads: Professor Dr. Bernd Finkbeiner; Professor Dr.-Ing. Christian Hammer