In the SIGACT article of Sep 1998 with the same title, three confinement (privacy) properties are presented for deterministic, nondeterministic and probabilistic (multi-threaded) languages. These properties will be discussed and limitations of NI-based info flow models, specifically with respect to public-key crypto, will be described. Some new directions will also be sketched.
Dennis Volpano, Confinement Properties for Programming Languages
Gates 104, 11/17/98, 4:15 PM