RIFL: Achievements & Outlook


RIFL, the RS3 Information-Flow Specification Language, is a
tool-independent and language-independent language for
specifying information-flow requirements. RIFL consists of two
parts. One part is independent of the language of the program
whose information-flow requirements are being specified. This
part of RIFL provides a syntax for general concepts from the
research area of information-flow security. The second part is
specific to the language of the program. This part provides a
syntax for denoting the sources and sinks of information in a
program.

RIFL can be used to create case studies for information-flow
security in a uniform and machine-readable syntax. This enables
the comparison and evaluation of security properties and of
information-flow analysis tools. Despite the maturity of the
field of information-flow security, a library of such case
studies did not exist yet.

In this talk, we briefly report on the advances in the
development and use of RIFL so far. Furthermore, we describe
our plans for further improvements.