Abstract:Information flow security has been considered as a critical requirement on software systems, especially when heterogeneous components from different parties cooperate to achieve end-to-end enforcement on data confidentiality. Enforcing the information flow security properties on complicated systems faces a great challenge because the properties cannot be preserved under composition and most of the current approaches are not scalable enough. To address this problem, there have been several recent efforts on the compositional information flow analyses developed for different abstraction levels. But these approaches have rarely been considered to incorporate with the process of system design. Integrating the security enforcement with the model-based development process can provide the designer with ability to verify information flow security in the early stage of system development. We propose a compositional information flow verification which is integrated with model-based system design in Sys ML by an automated model translation from semi-formal behavior and structure models to interface automata. Our compositional approach is general to support the complex security lattices and a variety of in distinguish ability relations. The evaluation results show the usability of our approach on practical system designs and the scalability of the compositional verification.

Security Process Algebra-Based Information Flow Analysis and Verification of Security Model

Security Process Algebra-Based Analysis and Verification of Information Flow Security Model

Security Process Algebra-based Analysis and Verification of Non-deducibility Security Model

Analysis for Real-time Intransitive Information Flow Security Properties

Research on Information Security Model and Security System Design

A Verified Capability-Based Model for Information Flow Security with Dynamic Policies

Verifying Secure Interface Composition for Component-Based System Designs

Quantum Information-Flow Security: Noninterference and Access Control

A Verification Method of Security Model Based on UML and Model Checking

A Multi-Compositional Enforcement on Information Flow Security

Integrating Information Flow Analysis in Unifying Theories of Programming

An efficient control flow security analysis approach for binary executables

Research on computer-aided formal modeling for security protocol code

Formal Analysis and Verification of Security for Automated Trust Negotiation

A Two-Fold Traffic Flow Model for Network Security Management

Secure Information Flow by Model Checking Pushdown System

Type-directed Trace Analysis of Security Protocols in Process Calculus

Checking security compliance between models and code

A Generic Model for Symbolic Analyzing Security Protocols

Model of Security Approach for Information System

A Security Assurance Framework Combining Formal Verification and Security Functional Testing