Architecture-Based and Uncertainty-Aware Confidentiality Analysis

Overview & Synopsis

In this work, we investigate architecture-based confidentiality analysis under uncertainty. We present a classification of uncertainty regarding confidentiality, a catalog of uncertainty sources, an uncertainty impact analysis that propagates uncertainty to predict its impact on the system's confidentiality, and uncertainty-aware confidentiality analyses that identify violations of confidentiality requirements with respect to uncertainty.