Synthesis of Local Controller Programs for Enforcing Global Security Properties

Authors:
Fabio Martinelli;Ilaria Matteucci
Affiliations:
-;-
Venue:
ARES '08 Proceedings of the 2008 Third International Conference on Availability, Reliability and Security
Year:
2008

Citing 0
Cited 4

Towards Information Flow Properties for Distributed Systems

Electronic Notes in Theoretical Computer Science (ENTCS)
Modular plans for secure service composition

ARSPA-WITS'10 Proceedings of the 2010 joint conference on Automated reasoning for security protocol analysis and issues in the theory of security
Service automata

FAST'11 Proceedings of the 8th international conference on Formal Aspects of Security and Trust
Modular plans for secure service composition

Journal of Computer Security - ARSPA-WITS'10

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we present a framework based on contexts theory and logic to study how, given a partially specified system, i.e., a system in which there are some unspecified\unknown components, i.e., potential attackers, it is possible to enforce a global security property by controlling all the unspecified parts of the given system. We propose two methods to control them: A centralized method, in which there is a unique controller program that controls all the unspecified components, and a decentralized one in which each unspecified component is monitored by a controller program that forces it to behave correctly, i.e., according to a local requirement found by a reduction of the global one. In both cases we show how to synthesize controller programs that solve the problem.