Abstract:Timing information leakage occurs whenever an attacker successfully deduces confidential internal information by observing some timed information such as events with timestamps. Timed automata are an extension of finite-state automata with a set of clocks evolving linearly and that can be tested or reset, making this formalism able to reason on systems involving concurrency and timing constraints. In this paper, we summarize a recent line of works using timed automata as the input formalism, in which we assume that the attacker has access (only) to the system execution time. First, we address the following execution-time opacity problem: given a timed system modeled by a timed automaton, given a secret location and a final location, synthesize the execution times from the initial location to the final location for which one cannot deduce whether the secret location was visited. This means that for any such execution time, the system is opaque: either the final location is not reachable, or it is reachable with that execution time for both a run visiting and a run not visiting the secret location. We also address the full execution-time opacity problem, asking whether the system is opaque for all execution times; we also study a weak counterpart. Second, we add timing parameters, which are a way to configure a system: we identify a subclass of parametric timed automata with some decidability results. In addition, we devise a semi-algorithm for synthesizing timing parameter valuations guaranteeing that the resulting system is opaque. Third, we report on problems when the secret has itself an expiration date, thus defining expiring execution-time opacity problems. We finally show that our method can also apply to program analysis with configurable internal timings.

Checking Timed Automata for Some Discretisable Duration Properties

Checking Timed Automata for Linear Duration Properties

A Systematic Study on Explicit-State Non-Zenoness Checking for Timed Automata

Language Inclusion Checking of Timed Automata with Non-Zenoness

Checking Hybrid Automata for Linear Duration Invariants

Model Checking of Continuous-Time Markov Chains Against Timed Automata Specifications

Model Checking for Timed Statecharts

Configuring Timing Parameters to Ensure Execution-Time Opacity in Timed Automata

Verifying Probabilistic Timed Automata Against Omega-Regular Dense-Time Properties

Abstraction Refinement Algorithms for Timed Automata

Improve Model Checking Efficiency Using Specific Knowledge about the System

From Durational Specifications to TLA Designs of Timed Automata

Towards the Complexity of Controls for Timed Automata with a Small Number of Clocks

Positive Loop-Closed Automata: A Decidable Class of Hybrid Systems

Timed I/O Automata: It is never too late to complete your timed specification theory

Model Checking on Duration Properties of Real-time Systems

On the verification of detectability for timed discrete event systems

A Study of Optimization Techniques about Reachability in Timed Automata

Bounded Determinization of Timed Automata with Silent Transitions

Remove Irrelevant Atomic Formulas for Timed Automaton Model Checking

Time-Bounded Verification of CTMCs Against Real-Time Specifications