Information Disclosure Detection in Cyber-Physical Systems

The detection of information disclosure attacks, i.e. the unauthorized disclosure of sensitive data, is a dynamic research field. The disclosure of sensitive data can be detected by various static and dynamic security analysis methods. In the context of Android, dynamic taint-tracking systems like Taintdroid have turned out to be especially promising. Here we present a simulation environment, which is based on existing dynamic taint-tracking systems. It extends these and changes the analysis concept behind the taint-tracking system it uses. While taint-tracking is mainly used for mobile devices running Android, we postulate the importance of detecting information disclosure in any cyber-physical system. In this paper, we explore the detection of information disclosure by simulating devices and monitoring the information flows inside and among the devices.