Automated Certification of Non-Interference in Rewriting Logic

Authors:
Mauricio Alba-Castro;María Alpuente;Santiago Escobar
Affiliations:
Universidad Politécnica de Valencia, Spain and Universidad Autónoma de Manizales, Colombia;Universidad Politécnica de Valencia, Spain;Universidad Politécnica de Valencia, Spain
Venue:
Formal Methods for Industrial Critical Systems
Year:
2009

Citing 0
Cited 2

A Tool for Automated Certification of Java Source Code in Maude

Electronic Notes in Theoretical Computer Science (ENTCS)
Abstract certification of global non-interference in rewriting logic

FMCO'09 Proceedings of the 8th international conference on Formal methods for components and objects

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper we propose a certification technique for non-interference of Java programs based on rewriting logic, a very general logical and semantic framework efficiently implemented in the high-level programming language Maude. Non---interference is a semantic program property that prevents illicit information flow to happen. Starting from a basic specification of the semantics of Java written in Maude, we develop an information---flow extension of this operational Java semantics which allows us to observe non-interference of Java programs. Then we develop in Maude an abstract, finite-state version of the information-flow operational semantics which supports finite program verification. As a by---product of the verification, a certificate of non-interference is delivered which consists of a set of (abstract) rewriting proofs that can be easily checked by the code consumer using a standard rewriting logic engine.