Anonymous Variables in Imperative Languages

Keehang Kwon

DOI: https://doi.org/10.48550/arXiv.1709.08193

2017-09-24

Programming Languages

Abstract:In this paper, we bring anonymous variables into imperative languages. Anonymous variables represent don't-care values and have proven useful in logic programming. To bring the same level of benefits into imperative languages, we describe an extension to C wth anonymous variables.

What problem does this paper attempt to address?

Anonymous authorization in trust management

彭志宇,李善平,杨朝晖,林欣

DOI: https://doi.org/10.3785/j.issn.1008-973X.2010.05.011

2010-01-01

Abstract:An anonymous authorization mechanism was proposed to protect the user's privacy in the process of authorization in trust management. User requested for services using their real identification in most of the classic trust-management language system, which potentially leaded to the privacy leaking. Through dynamically searching for the delegation roles which take over the request, the anonymous authorization mechanism retained the right behavior of credential chain discovery and achieved a quantitative way of anonymity against the resource provider. Results showed that the anonymous mechanism shared the same worst-case time complexity with the traditional forward credential-chain-searching method. A method of caching all the members in the nodes was proposed to improve the performance in time spending. Simulation results showed that the performance in time spending greatly improved in the relative stable systems, in which the credentials change slowly.
Free Variable as Effect, in Practice

Oleg Kiselyov

DOI: https://doi.org/10.48550/arXiv.2312.16446

2023-12-27

Abstract:Variable environment is the time-honored way of making sense of free variables, used in programming language theory as well when writing interpreters and some compilers. Algebraic effects give another way, as was pointed already at HOPE 2017. Although a theoretical curiosity, it may have surprising practical benefits: a new way of writing compilers, with the incremental type-checking, with easy variable usage, leaf function analyses. This work-in-progress report prototypes and illustrates the idea.

Programming Languages
I still know it's you! On Challenges in Anonymizing Source Code

Micha Horlboge,Erwin Quiring,Roland Meyer,Konrad Rieck

2024-04-10

Abstract:The source code of a program not only defines its semantics but also contains subtle clues that can identify its author. Several studies have shown that these clues can be automatically extracted using machine learning and allow for determining a program's author among hundreds of programmers. This attribution poses a significant threat to developers of anti-censorship and privacy-enhancing technologies, as they become identifiable and may be prosecuted. An ideal protection from this threat would be the anonymization of source code. However, neither theoretical nor practical principles of such an anonymization have been explored so far. In this paper, we tackle this problem and develop a framework for reasoning about code anonymization. We prove that the task of generating a $k$-anonymous program -- a program that cannot be attributed to one of $k$ authors -- is not computable in the general case. As a remedy, we introduce a relaxed concept called $k$-uncertainty, which enables us to measure the protection of developers. Based on this concept, we empirically study candidate techniques for anonymization, such as code normalization, coding style imitation, and code obfuscation. We find that none of the techniques provides sufficient protection when the attacker is aware of the anonymization. While we observe a notable reduction in attribution performance on real-world code, a reliable protection is not achieved for all developers. We conclude that code anonymization is a hard problem that requires further attention from the research community.

Cryptography and Security,Machine Learning,Programming Languages,Software Engineering
Guaranteeing Anonymity in Attribute-Based Authorization

Erin Lanus,Charles J. Colbourn,Gail-Joon Ahn

DOI: https://doi.org/10.48550/arXiv.2310.04896

2023-10-08

Abstract:Attribute-based methods, such as attribute-based access control and attribute-based encryption, make decisions based on attributes possessed by a subject rather than the subject's identity. While this allows for anonymous authorization -- determining that a subject is authorized without knowing the identity of the subject -- it does not guarantee anonymity. If a policy can be composed such that few subjects possess attributes satisfying the policy, then when the policy is used for access control, in addition to making a grant or deny decision, the system can also guess with high probability the identity of the subject making the request. Other approaches to achieving anonymity in attribute-based authorization do not address this attribute distribution problem. Suppose polices contain conjunctions of at most $t$ attributes and the system must not be able to guess with probability greater than $\frac{1}{r}$ the identity of a subject using a policy for authorization. We say the anonymity guarantee is $r$ for maximum credential size $t$. An anonymizing array is a combinatorial array proposed as an abstraction to address the underlying attribute distribution problem by ensuring that any assignment of values to $t$ attributes appearing in the array appears at least $r$ times. Anonymizing arrays are related to covering arrays with higher coverage, but have an additional desired property, homogeneity, due to their application domain. In this work, we discuss the application of anonymizing arrays to guarantee anonymous authorization in attribute-based methods. Additionally, we develop metrics, local and global homogeneity, to compare anonymizing arrays with the same parameters.

Cryptography and Security
Translating declarative control elements to imperative using 'l-value redefinition graphs'

Anthony Savidis

DOI: https://doi.org/10.48550/arXiv.2103.03309

2021-03-04

Programming Languages

Abstract:We focus on control constructs that allow programmers define actions to be performed when respective conditions are met without requiring the explicit evaluation and testing of conditions as part of an imperative algorithm. Such elements are commonly referred as declarative, not theoretically related to declarative languages. We introduce declarative constructs in the C++ language, presenting the translation method to standard C++. The innovative feature of our method is the accommodation of l-values involving arbitrary pointer / array expressions and objects, supporting immediate runtime evaluation upon content update even if such l-values bind to variant storage locations at runtime. To accomplish this we define 'l-value redefinition graphs', capturing storage binding dependencies among variables, being the floor-plan of our code generation and runtime management approach.
Continuation-Passing Style, Defunctionalization, Accumulations, and Associativity

Jeremy Gibbons

DOI: https://doi.org/10.22152/programming-journal.org/2022/6/7

2021-11-20

Abstract:Context: Reynolds showed us how to use continuation-passing style and defunctionalization to transform a recursive interpreter for a language into an abstract machine for programs in that language. The same techniques explain other programming tricks, including zippers and accumulating parameters. Inquiry: Buried within all those applications there is usually a hidden appeal to the algebraic property of associativity. Approach: Our purpose in this paper is to entice associativity out of the shadows and into the limelight. Knowledge: We revisit some well-known applications (factorial, fast reverse, tree flattening, and a compiler for a simple expression language) to spotlight their dependence on associativity. Grounding: We replay developments of these programs through a series of program transformations and data refinements, justified by equational reasoning. Importance: Understanding the crucial role played by associativity clarifies when continuation-passing style and defunctionalization can help and when they cannot, and may prompt other applications of these techniques.

Programming Languages
Incorporating User Interaction into Imperative Languages

Keehang Kwon

DOI: https://doi.org/10.48550/arXiv.1508.03837

2015-08-16

Programming Languages

Abstract:In this paper, we present two new forms of the $write$ statement: one of the form $write(x);G$ where $G$ is a statement and the other of the form $write(x);D$ where $D$ is a module. The former is a generalization of traditional $write$ statement and is quite useful. The latter is useful for implementing interactive modules.
Variable binding and substitution for (nameless) dummies

André Hirschowitz,Tom Hirschowitz,Ambroise Lafont,Marco Maggesi

DOI: https://doi.org/10.46298/lmcs-20%281%3A18%292024

2024-02-29

Abstract:By abstracting over well-known properties of De Bruijn's representation with nameless dummies, we design a new theory of syntax with variable binding and capture-avoiding substitution. We propose it as a simpler alternative to Fiore, Plotkin, and Turi's approach, with which we establish a strong formal link. We also show that our theory easily incorporates simple types and equations between terms.

Logic in Computer Science
Anonymous Signature Schemes

Guomin Yang,Duncan S. Wong,Xiaotie Deng,Huaxiong Wang

DOI: https://doi.org/10.1007/11745853_23

2006-01-01

Abstract:Digital signature is one of the most important primitives in public key cryptography. It provides authenticity, integrity and non- repudiation to many kinds of applications. On signer privacy however, it is generally unclear or suspicious of whether a signature scheme itself can guarantee the anonymity of the signer. In this paper, we give some armative answers to it. We formally define the signer anonymity for digital signature and propose some schemes of this type. We show that a signer anonymous signature scheme can be very useful by proposing a new anonymous key exchange protocol which allows a client Alice to establish a session key with a server Bob securely while keeping her iden- tity secret from eavesdroppers. In the protocol, the anonymity of Alice is already maintained when Alice sends her signature to Bob in clear, and no additional encapsulation or mechanism is needed for the signa- ture. We also propose a method of using anonymous signature to solve the collusion problem between organizers and reviewers of an anonymous paper review system.
Realizing Implicit Computational Complexity

Clément Aubert,Thomas Rubiano,Neea Rusch,Thomas Seiller

DOI: https://doi.org/10.48550/arXiv.2203.05221

2022-05-25

Abstract:This abstract aims at presenting an ongoing effort to apply a novel typing mechanism stemming from Implicit Computational Complexity (ICC), that tracks dependencies between variables in three different ways, at different stages of <a class="link-external link-http" href="http://maturation.The" rel="external noopener nofollow">this http URL</a> first and third projects bend the original typing discipline to gain finer-grained view on statements independence, to optimize loops by hoisting invariant and by splitting loops "horizontally" to parallelize them more <a class="link-external link-http" href="http://efficiently.The" rel="external noopener nofollow">this http URL</a> second project refines and implements the original analysis to obtain a fast, modular static <a class="link-external link-http" href="http://analyzer.All" rel="external noopener nofollow">this http URL</a> three projects aims at pushing the original type system, inspired from ICC, to its limits, to assess how ICC can in practice leads to original, sometimes orthogonal, approaches.

Computational Complexity,Logic in Computer Science
Output-sensitive Information flow analysis

Cristian Ene,Laurent Mounier,Marie-Laure Potet

DOI: https://doi.org/10.48550/arXiv.1909.09567

2019-09-20

Cryptography and Security

Abstract:Constant-time programming is a countermeasure to prevent cache based attacks where programs should not perform memory accesses that depend on secrets. In some cases this policy can be safely relaxed if one can prove that the program does not leak more information than the public outputs of the computation. We propose a novel approach for verifying constant-time programming based on a new information flow property, called output-sensitive noninterference. Noninterference states that a public observer cannot learn anything about the private data. Since real systems need to intentionally declassify some information, this property is too strong in practice. In order to take into account public outputs we proceed as follows: instead of using complex explicit declassification policies, we partition variables in three sets: input, output and leakage variables. Then, we propose a typing system to statically check that leakage variables do not leak more information about the secret inputs than the public normal output. The novelty of our approach is that we track the dependence of leakage variables with respect not only to the initial values of input variables (as in classical approaches for noninterference), but taking also into account the final values of output variables. We adapted this approach to LLVM IR and we developed a prototype to verify LLVM implementations.
An Alternative Interpretation of Linguistic Variables as Linguistic Finite Automata

Supriya Raheja,Reena Dhadich,Smita Rajpal

DOI: https://doi.org/10.48550/arXiv.1112.3435

2011-12-15

Abstract:Linguistic variables represent crisp information in a form and precision appropriate for the problem. For example, to answer the question "How are you?" one may say "I am fine." the linguistic variables like "fine", so common in everyday speech. In this paper an alternative interpretation of linguistic variables is introduced with the notion of a linguistic description of a value or set of values. The use of linguistic variables in many applications reduces the overall computation complexity of the application. Linguistic variables have been shown to be particularly useful in complex non-linear applications. Here we are applying the concept of reasoning with Linguistic Quantifiers to define the Linguistic Finite Automata along with the expansion of \delta^{\box} and \lambda^{\box} over \delta and \lambda.

Formal Languages and Automata Theory
Integration of Static and Dynamic Code Stylometry Analysis for Programmer De-anonymization

Ningfei Wang,Shouling Ji,Ting Wang

DOI: https://doi.org/10.1145/3270101.3270110

2018-01-15

Abstract:De-anonymizing the authors of anonymous code (i.e., code stylometry) entails significant privacy and security implications. Most existing code stylometry methods solely rely on static (e.g., lexical, layout, and syntactic) features extracted from source code, while neglecting its key difference from regular text -- it is executable! In this paper, we present Sundae, a novel code de-anonymization framework that integrates both static and dynamic stylometry analysis. Compared with the existing solutions, Sundae departs in significant ways: (i) it requires much less number of static, hand-crafted features; (ii) it requires much less labeled data for training; and (iii) it can be readily extended to new programmers once their stylometry information becomes available Through extensive evaluation on benchmark datasets, we demonstrate that Sundae delivers strong empirical performance. For example, under the setting of 229 programmers and 9 problems, it outperforms the state-of-art method by a margin of 45.65% on Python code de-anonymization. The empirical results highlight the integration of static and dynamic analysis as a promising direction for code stylometry research.
Designing Anonymity

Paula Helm

DOI: https://doi.org/10.48550/arXiv.2110.09237

2021-10-03

Computers and Society

Abstract:Creating anonymity means cutting connections. A common goal in this context is to prevent accountability. This prevention of accountability can be problematic, for example, if it leads to delinquents remaining undetected. However, imputability can also provide protection against discrimination. In medical, religious or legal matters, this is of fundamental importance. Thus, when individuals actively establish anonymity, they do so mostly because they want to prevent certain information about them, that is, sensitive and/or compromising information, from being associated with their identities. By remaining inaccessible as individuals with respect to certain information about them, they can engage in forms of exchange that would otherwise be impossible for them. Examples include practices of exchange in (self-organized) therapy groups, acting out stigmatized sexual preferences, the role of anonymity in the performing arts, or political resistance movements. Given the variety of examples in which personal anonymity is important, it is not surprising that it is primarily these personal dimensions that are the focus of current debates about the increasing precariousness of anonymity in the face of new technical possibilities of data mining and processing. In this paper, we nevertheless - or precisely because of this - want to focus on another aspect of anonymity that has received much less attention so far. Namely, we assume that researching and working with and about anonymity can open up new perspectives on and for contemporary forms of knowledge production.
The Octagon Abstract Domain

Antoine Miné

DOI: https://doi.org/10.48550/arXiv.cs/0703084

2007-03-16

Abstract:This article presents a new numerical abstract domain for static analysis by abstract interpretation. It extends a former numerical abstract domain based on Difference-Bound Matrices and allows us to represent invariants of the form (+/-x+/-y<=c), where x and y are program variables and c is a real constant. We focus on giving an efficient representation based on Difference-Bound Matrices - O(n2) memory cost, where n is the number of variables - and graph-based algorithms for all common abstract operators - O(n3) time cost. This includes a normal form algorithm to test equivalence of representation and a widening operator to compute least fixpoint approximations.

Programming Languages
Analysis of Equality Relationships for Imperative Programs

P. Emelyanov

DOI: https://doi.org/10.48550/arXiv.cs/0609092

2006-09-16

Programming Languages

Abstract:In this article, we discuss a flow--sensitive analysis of equality relationships for imperative programs. We describe its semantic domains, general purpose operations over abstract computational states (term evaluation and identification, semantic completion, widening operator, etc.) and semantic transformers corresponding to program constructs. We summarize our experiences from the last few years concerning this analysis and give attention to applications of analysis of automatically generated code. Among other illustrating examples, we consider a program for which the analysis diverges without a widening operator and results of analyzing residual programs produced by some automatic partial evaluator. An example of analysis of a program generated by this evaluator is given.
A Novel Variable K-Pseudonym Scheme Applied to 5G Anonymous Access Authentication

Dong Ma,Xixiang Lyu,Renpeng Zou

DOI: https://doi.org/10.48550/arXiv.2106.07158

2021-06-14

Abstract:Anonymous access authentication schemes provide users with massive application services while protecting the privacy of users' identities. The identity protection schemes in 3G and 4G are not suitable for 5G anonymous access authentication due to complex computation and pseudonym asynchrony. In this paper, we consider mobile devices with limited resources in the 5G network and propose an anonymous access authentication scheme without the Public Key Infrastructure. The anonymous access authentication scheme provides users with variable shard pseudonyms to protect users' identities asynchronously. With the variable shared pseudonym, our scheme can ensure user anonymity and resist the mark attack, a novel attack aimed at the basic k-pseudonym scheme. Finally, we analyze the scheme with BAN logic analysis and verify the user anonymity.

Cryptography and Security,Social and Information Networks
A Term-Rewriting Semantics for Imperative Style Programming

David Plaisted,Lee Barnett

DOI: https://doi.org/10.48550/arXiv.2007.03075

2020-07-07

Abstract:Term rewriting systems have a simple syntax and semantics and facilitate proofs of correctness. However, they are not as popular in industry or academia as imperative languages. We define a term rewriting based abstract programming language with an imperative style and a precise semantics allowing programs to be translatable into efficient imperative languages, to obtain proofs of correctness together with efficient execution. This language is designed to facilitate translations into correct programs in imperative languages with assignment statements, iteration, recursion, arrays, pointers, and side effects. It can also be used in place of a pseudo-programming language to specify algorithms.

Programming Languages,Software Engineering
On Evaluating Obfuscatory Strength of Alias-based Transforms Using Static Analysis

Anirban Majumdar,Antoine Monsifrot,Clark Thomborson

DOI: https://doi.org/10.1109/adcom.2006.4289963

2006-01-01

Abstract:Aliasing occurs when two variables refer to the same memory location. This technique has been exploited for constructing resilient obfuscation transforms in languages that extensively use indirect referencing. The theoretical basis for these transforms is derived from the hard complexity results of precisely determining which set of variables refer to the same memory location at a given program point during execution. However, no method is known for randomly generating hard problem instances. Unless we are able to evaluate the obfuscatory strength of these transforms using static analysis tools, we cannot correlate the resilience expected in theory with what actually holds in practice. In this contribution, we will outline the main difficulties in experimentally evaluating obfuscatory strength and give an overview of techniques that are suited for analysing well-established alias-based obfuscation transforms.

Anonymous Variables in Imperative Languages

Anonymous authorization in trust management

Free Variable as Effect, in Practice

I still know it's you! On Challenges in Anonymizing Source Code

Guaranteeing Anonymity in Attribute-Based Authorization

Translating declarative control elements to imperative using 'l-value redefinition graphs'

Continuation-Passing Style, Defunctionalization, Accumulations, and Associativity

Incorporating User Interaction into Imperative Languages

Variable binding and substitution for (nameless) dummies

Anonymous Signature Schemes

Realizing Implicit Computational Complexity

Output-sensitive Information flow analysis

An Alternative Interpretation of Linguistic Variables as Linguistic Finite Automata

Integration of Static and Dynamic Code Stylometry Analysis for Programmer De-anonymization

Designing Anonymity

The Octagon Abstract Domain

Analysis of Equality Relationships for Imperative Programs

A Novel Variable K-Pseudonym Scheme Applied to 5G Anonymous Access Authentication

A Term-Rewriting Semantics for Imperative Style Programming

On Evaluating Obfuscatory Strength of Alias-based Transforms Using Static Analysis