Maintaining information flow security under refinement and transformation

  • Authors:
  • Fredrik Seehusen;Ketil Stølen

  • Affiliations:
  • SINTEF Information and Communication Technology, Norway and University of Oslo, Norway;SINTEF Information and Communication Technology, Norway and University of Oslo, Norway

  • Venue:
  • FAST'06 Proceedings of the 4th international conference on Formal aspects in security and trust
  • Year:
  • 2006

Quantified Score

Hi-index 0.00

Visualization

Abstract

We address the problem of maintaining information flow security under refinement and transformation. To this end we define a schema for the specification of secure information flow properties and show that all security properties defined in the schema are preserved by a notion of refinement. Refinement is a process that requires human guidance and is in general not subject for automation. A transformation on the other hand, is an executable function mapping specifications to specifications. We define an interpretation of transformations and propose a condition under which transformations maintain security.