Synthesizing Enforcement Monitors wrt. the Safety-Progress Classification of Properties

  • Authors:
  • Yliès Falcone;Jean-Claude Fernandez;Laurent Mounier

  • Affiliations:
  • VERIMAG, Université Grenoble I, INPG, CNRS,;VERIMAG, Université Grenoble I, INPG, CNRS,;VERIMAG, Université Grenoble I, INPG, CNRS,

  • Venue:
  • ICISS '08 Proceedings of the 4th International Conference on Information Systems Security
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Runtime enforcement is a powerful technique to ensure that a program will respect a given security policy. We extend previous works on this topic in several directions. Firstly, we propose a generic notion of enforcement monitors based on a memory device and finite sets of control states and enforcement operations. Moreover, we specify their enforcement abilities w.r.t. the general safety-progress classification of properties. It allows a fine-grain characterization of the space of enforceable properties. Finally, we propose a systematic technique to produce an enforcement monitor from the Streett automaton recognizing a given safety, guarantee, obligation or response security property.