Abstract:Information flow security has been considered as a critical requirement on software systems, especially when heterogeneous components from different parties cooperate to achieve end-to-end enforcement on data confidentiality. Enforcing the information flow security properties on complicated systems faces a great challenge because the properties cannot be preserved under composition and most of the current approaches are not scalable enough. To address this problem, there have been several recent efforts on the compositional information flow analyses developed for different abstraction levels. But these approaches have rarely been considered to incorporate with the process of system design. Integrating the security enforcement with the model-based development process can provide the designer with ability to verify information flow security in the early stage of system development. We propose a compositional information flow verification which is integrated with model-based system design in Sys ML by an automated model translation from semi-formal behavior and structure models to interface automata. Our compositional approach is general to support the complex security lattices and a variety of in distinguish ability relations. The evaluation results show the usability of our approach on practical system designs and the scalability of the compositional verification.

Enforcing Reactive Noninterference with Reachability Analysis

A Multi-Compositional Enforcement on Information Flow Security

Computation platform for automatic analysis of embedded software systems using model based approach

Secure Information Flow in Java Via Reachability Analysis of Pushdown System

More anti-chain based refinement checking

A New Enforcement on Declassification with Reachability Analysis

Analysis for Real-time Intransitive Information Flow Security Properties

Checking Information Flow on Output Channel with Reachability Analysis of Pushdown System

Automated Verification of Reactive and Concurrent Programs by Calculation

Verifying Secure Interface Composition for Component-Based System Designs

Integration of Safety Verification with Conformance Testing in Real-Time Reactive System

Reachability Assume-Guarantee

Dependency Analysis for Control Flow Cycles in Reactive Communicating Processes

Secure Information Flow by Model Checking Pushdown System

Formal Verification of Robotic Contact Tasks via Reachability Analysis

Enforcing Relaxed Declassifications with Reference Points

An Event-based Compositional Reasoning Approach for Concurrent Reactive Systems.

A New Parallel Approach for Reachability Analysis of Pushdown Models

Enabling Efficient Real-Time Requirements Inconsistency Detection for Safety-Critical Systems

Compositional Reasoning for Shared-variable Concurrent Programs.

Reactive Safety