Abstract
In this paper, we propose Java annotations for the information flow analysis of Java programs. Information flow analysis is useful for statically detecting leaks of confidential information. We propose annotations to define a lattice of overall confidentiality and a confidentiality level of each data item in programs, which are required by the information flow analysis. We implemented an analyzer of information flow for the annotated Java programs as an extension of the Java compiler of OpenJDK.
