Foundations of quantitative information flow: Channels, cascades, and the information order

Secrecy is fundamental to computer security, but real systems often cannot avoid leaking some secret information. For this reason, the past decade has seen growing interest in quantitative theories of information flow that allow us to quantify the information being leaked. Within these theories, the system is modeled as an information-theoretic channel that specifies the probability of each output, given each input. Given a prior distribution on those inputs, entropy-like measures quantify the amount of information leakage caused by the channel. ^ This thesis presents new results in the theory of min-entropy leakage. First, we study the perspective of secrecy as a resource that is gradually consumed by a system. We explore this intuition through various models of min-entropy consumption. Next, we consider several composition operators that allow smaller systems to be combined into larger systems, and explore the extent to which the leakage of a combined system is constrained by the leakage of its constituents. Most significantly, we prove upper bounds on the leakage of a cascade of two channels, where the output of the first channel is used as input to the second. In addition, we show how to decompose a channel into a cascade of channels. ^ We also establish fundamental new results about the recently-proposed g-leakage family of measures. These results further highlight the significance of channel cascading. We prove that whenever channel A is composition refined by channel B, that is, whenever A is the cascade of B and R for some channel R, the leakage of A never exceeds that of B, regardless of the prior distribution or leakage measure (Shannon leakage, guessing entropy leakage, min-entropy leakage, or g-leakage). Moreover, we show that composition refinement is a partial order if we quotient away channel structure that is redundant with respect to leakage alone. These results are strengthened by the proof that composition refinement is the only way for one channel to never leak more than another with respect to g-leakage. Therefore, composition refinement robustly answers the question of when a channel is always at least as secure as another from a leakage point of view.^

Customer Satisfaction and Behavioral Intentions: The Case of Aruba-- Small Island Nation

Tourism studies related to small island destinations have become a research stream amongst many academics in recent years. The current study investigates tourist satisfaction related to a tour operator on the island of Aruba that specializes in jeep and bus tours. As there is an increased expenditure pattern for these types of activities, companies are looking for ways to improve customer satisfaction and behavioral intentions. Results indicate that tourists are generally satisfied with the tour company; however a difference in satisfaction ratings was obtained for respondents 61 years old or above. Four factors were extracted from tourists’ satisfaction attributes and three of these factors, including the overall tour value, tour guide, and sound systems used during these tours, were found to be strong predictors of behavioral intentions measured by the likelihood to rebook and the likelihood to recommend the tour company to family and friends. Operational and marketing strategies were suggested based on the findings of the study.