Subjects manipulate objects according to the access rights. Here, illegal information flow occurs in the read operation. In our previous studies, a read rejection method is considered where the illegal read operations are rejected. The illegal read operation is a read operation occurring illegal information flow. In this paper, we propose a write rejection method. In the write rejection method, a read operation is not rejected even if the read operation occurs illegal information flow. However, the illegal write operations are rejected. The illegal write operation is a write operation to write the data read in an illegal read operation to an object. Therefore, it is prevented to flow the data read in illegal read operations to objects. Suppose data of objects are text. The LLM (Large Language Model) is used to check the data read in an illegal read operation are written to an object in a write operation. By fine tuning the LLM, the similarity between the data read in an illegal read operation from an object and the data written to another object is made clear. If the similarity is larger than a threshold, the data read in an illegal read operation flow to another object in the write operation. Therefore, the illegal write operation is rejected. Otherwise, the write operation is not rejected. Generally, most operations issued by subjects are read. The smaller number of read operations are rejected in the write rejection method than the read rejection method.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

A Write Rejection Method in Information Flow Control Based on the LLM

  • Shigenari Nakamura,
  • Lidia Ogiela,
  • Makoto Takizawa

摘要

Subjects manipulate objects according to the access rights. Here, illegal information flow occurs in the read operation. In our previous studies, a read rejection method is considered where the illegal read operations are rejected. The illegal read operation is a read operation occurring illegal information flow. In this paper, we propose a write rejection method. In the write rejection method, a read operation is not rejected even if the read operation occurs illegal information flow. However, the illegal write operations are rejected. The illegal write operation is a write operation to write the data read in an illegal read operation to an object. Therefore, it is prevented to flow the data read in illegal read operations to objects. Suppose data of objects are text. The LLM (Large Language Model) is used to check the data read in an illegal read operation are written to an object in a write operation. By fine tuning the LLM, the similarity between the data read in an illegal read operation from an object and the data written to another object is made clear. If the similarity is larger than a threshold, the data read in an illegal read operation flow to another object in the write operation. Therefore, the illegal write operation is rejected. Otherwise, the write operation is not rejected. Generally, most operations issued by subjects are read. The smaller number of read operations are rejected in the write rejection method than the read rejection method.