On the automated synthesis of proof-carrying temporal reference monitors

  • Authors:
  • Simon Winwood;Gerwin Klein;Manuel M. T. Chakravarty

  • Affiliations:
  • University of New South Wales, School of Computer Science & Engineering, Sydney, Australia and National ICT Australia;University of New South Wales, School of Computer Science & Engineering, Sydney, Australia and National ICT Australia;University of New South Wales, School of Computer Science & Engineering, Sydney, Australia

  • Venue:
  • LOPSTR'06 Proceedings of the 16th international conference on Logic-based program synthesis and transformation
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

We extend the range of security policies that can be guaranteed with proof carrying code from the classical type safety, control safety, memory safety, and space/time guarantees to more general security policies, such as general resource and access control. We do so by means of (1) a specification logic for security policies, which is the past-time fragment of LTL, and (2) a synthesis algorithm generating reference monitor code and accompanying proof objects from formulae of the specification logic. To evaluate the feasibility of our approach, we developed a prototype implementation producing proofs in Isabelle/HOL.