RIFL: A Uniform Language for Information-Flow Requirements
and Assumptions


RIFL, the RS3 Information-Flow Specification Language, is a
tool-independent and language-independent language for
specifying information-flow requirements. RIFL consists of two
parts. One part is independent of the language of the program
whose information-flow requirements are being specified. This
part of RIFL provides a syntax for general concepts from the
research area of information-flow security. The second part is
specific to the language of the program. This part provides a
syntax for denoting the sources and sinks of information in a
program.

In this talk, we report on the advances in the development
of RIFL so far. These allow users of RIFL to specify a wider
range of information-flow requirements, including controlled
declassification since the most recent version of RIFL.
Furthermore, we describe a planned extension of RIFL by a
sub-language for specifying assumptions on the flow of
information in the environment of a program. Finally, we
describe how this extension can be used in the CRISP and
RS3 projects.