Trustworthy Systems

An axiomatization of information flow measures


Mário S. Alvim, Konstantinos Chatzikokolakis, Annabelle McIver, Carroll Morgan, Catuscia Palamidessi and Geoffrey Smith

    School of Computer Science and Engineering
    Sydney 2052, Australia


Quantitative information flow aims to assess and control the leakage of sensitive information by computer systems. A key insight in this area is that no single leakage measure is appropriate in all operational scenarios; as a result, many leakage measures have been proposed, with many different properties. To clarify this complex situation, this paper studies information leakage axiomatically, showing important dependencies among different axioms. It also establishes a completeness result about the g-leakage family, showing that any leakage measure satisfying certain intuitively-reasonable properties can be expressed as a g-leakage.

BibTeX Entry

    author           = {Mário S. Alvim and Konstantinos Chatzikokolakis and Annabelle McIver and Carroll Morgan and Catuscia
                        Palamidessi and Geoffrey Smith},
    doi              = {},
    issn             = {0304-3975},
    journal          = {Theoretical Computer Science},
    keywords         = {Information flow, Vulnerability, Information theory, Confidentiality, Axioms},
    note             = {In memory of Maurice Nivat, a founding father of Theoretical Computer Science --- Part I},
    pages            = {32-54},
    paperurl         = {},
    title            = {An axiomatization of information flow measures},
    url              = {},
    volume           = {777},
    year             = {2019}