Abstract
Detecting potential data breaches in software systems can be effectively achieved through language-based information flow security analysis. Significant risk to confidential data, potentially leading to security breaches, is posed because of poor coding practices in database applications. To tackle the issue, our paper presents a dependency graphbased approach that identifies potential confidentiality leaks in software code. For a variety of software engineering tasks, including information flow security analysis, debugging, code optimization, enabling code reuse, and enhancing program comprehension, Dependency information plays an essential role. Existing dependency information techniques fail to generate precise results. Through the utilisation of syntaxbased dependency analysis, we enhance and improvise on existing techniques by introducing a new Dependency, which can result in indirect information leakage. A precise dependency information, which improves the accuracy of security analysis results, is provided through this refinement. We provide experimental results on benchmark codes to validate our approach. To determine illegal information flows, we use propositional formulae for the security-level truth assignments. Thorough utilisation of such an approach aids in bridging the gap between existing approaches and future applications to handle the same.