Towards Secrecy Wildcards in Information Flow Analysis

Abstract

This paper proposes secrecy wildcards for improving the flexibility of classes with parameterized secrecy in information flow analysis. It is hard to implement flexible APIs with secrecy-parameterized classes because the secrecy-parameterized classes are invariant, but wildcards for secrecy do not exist. In this paper, we formalize bounded secrecy wildcards used in the type of method parameters and define Java annotations for secrecy wildcards.