Home /
Expert Answers /
Computer Science /
hello-please-help-me-with-this-where-the-rules-are-2-laundering-attack-prove-that-the-following-pr-pa579

hello, please help me with this:

where the rules are:

2 Laundering attack Prove that the following program is insecure according to the definition of delimited release. Remember that $h$ is a secret $n$-bit integer and $k,l,n$ are public. Then use the type and effect system as described in the slides, assuming the typing environment $Γ={h:H,k:L,l:L,n:L}$ for a two-element security lattice ${L,H}$ such that $L⊑H$, to show that this program is insecure. Which statement(s) is/are not typeable? $l:=0;$ while $(n>=0)$ do $k:=2_{∼}(n−1);$ if declassify $(h>=k$, L $)$ then $(h:=h−k;l:=l+k)$ else skip; $n:=n−1;$ $1:=0$; while $(n>=0)$ do $k:=2_{∧}(n−1)$; if declassify $(h>=k,L)$ then $(h:=h−k;1:=l+k)$ else skip; $n:=n−1$
$Γ⊢e:l,D$ means an expression $e$ has type $l$ and effect $D$ under an environment $Γ$ $Γ⊢val:ℓ,∅Γ⊢v:ℓ,∅Γ(v)=ℓ $ $Γ⊢declassify(e,ℓ_{′}):ℓ_{′},Vars(e)Γ⊢e:ℓ,D $ $Γ⊢e:ℓ_{′},DΓ⊢e:ℓ,Dℓ⊑ℓ_{′} $ $Γ⊢eope_{′}:ℓ,D_{1}∪D_{2}Γ⊢e:ℓ,D_{1}Γ⊢e_{′}:ℓ,D_{2} $ Typing for commands has the form $Γ,pc⊢c:U$, $Γ,pc⊢v:=e:{v},DΓ⊢e:ℓ,Dℓ⊔pc⊑Γ(v) $ $D$ where $U,D$ are effects $Γ,pc⊢skip:∅,∅Γ,pc⊢v:=e:{v},DΓ⊢e:ℓ,Dℓ⊔pc⊑Γ(v) $
Type and effect system $Γ,pc⊢c_{1};c_{2}:U_{1}∪U_{2},D_{1}∪D_{2}Γ,pc⊢c_{1}:U_{1},D_{1}Γ,pc⊢c_{2}:U_{2},D_{2}U_{1}∩D_{2}=∅ Γ,pc⊢ifethenc_{1}elsec_{2}:U_{1}∪U_{2},D∪D_{1}∪D_{2}Γ⊢e:ℓ,DΓ,ℓ⊔pc⊢c_{1}:U_{1},D_{1}Γ,ℓ⊔pc⊢c_{2}:U_{2},D_{2} Γ,pc⊢whileedoc:U_{1},D∪D_{1}Γ⊢e:ℓ,DΓ,ℓ⊔pc⊢c:U_{1},D_{1}U_{1}∩(D∪D_{1})=∅ Γ,pc_{′}⊢c:U,DΓ,pc⊢c:U,Dpc_{′}⊑pc $

To determine the security of the program according to the definition of delimited release, we need t...