Abstract:Timing information leakage occurs whenever an attacker successfully deduces confidential internal information by observing some timed information such as events with timestamps. Timed automata are an extension of finite-state automata with a set of clocks evolving linearly and that can be tested or reset, making this formalism able to reason on systems involving concurrency and timing constraints. In this paper, we summarize a recent line of works using timed automata as the input formalism, in which we assume that the attacker has access (only) to the system execution time. First, we address the following execution-time opacity problem: given a timed system modeled by a timed automaton, given a secret location and a final location, synthesize the execution times from the initial location to the final location for which one cannot deduce whether the secret location was visited. This means that for any such execution time, the system is opaque: either the final location is not reachable, or it is reachable with that execution time for both a run visiting and a run not visiting the secret location. We also address the full execution-time opacity problem, asking whether the system is opaque for all execution times; we also study a weak counterpart. Second, we add timing parameters, which are a way to configure a system: we identify a subclass of parametric timed automata with some decidability results. In addition, we devise a semi-algorithm for synthesizing timing parameter valuations guaranteeing that the resulting system is opaque. Third, we report on problems when the secret has itself an expiration date, thus defining expiring execution-time opacity problems. We finally show that our method can also apply to program analysis with configurable internal timings.

strategFTO: Untimed control for timed opacity

Execution-time opacity control for timed automata

Configuring Timing Parameters to Ensure Execution-Time Opacity in Timed Automata

The Bright Side of Timed Opacity

Expiring opacity problems in parametric timed automata

Analysis for Real-time Intransitive Information Flow Security Properties

Execution-time opacity problems in one-clock parametric timed automata

Control strategies for off-line testing of timed systems

Planning with Probabilistic Opacity and Transparency: A Computational Model of Opaque/Transparent Observations

Quantitative Verification of Opacity Properties in Security Systems

Opacity Enforcement by Edit Functions Under Incomparable Observations

Opacity Enforcing Supervisory Control Using Non-deterministic Supervisors

On Approximate Opacity of Stochastic Control Systems

STP-based verification and synthesis of state opacity for logical finite state machines

Fast Finite-Time Secure Control for Nonlinear Systems under Dynamic Event-triggered Mechanism

Speed Me up if You Can: Conditional Lower Bounds on Opacity Verification

Maximally Permissive Supervisory Control of Timed Discrete-Event Systems under Partial Observation

Infinite-Step Opacity of Stochastic Discrete-Event Systems

Abstraction-Based Synthesis of Opacity-Enforcing Controllers Using Alternating Simulation Relations

You Don't Know What I Know: on Notion of High-Order Opacity in Discrete-Event Systems

Matrix Approach for Verification of Opacity of Partially Observed Discrete Event Systems