The B-book: assigning programs to meanings
The B-book: assigning programs to meanings
Protection in operating systems
Communications of the ACM
Algorithms and Proofs Inheritance in the FOC Language
Journal of Automated Reasoning
Development of a Generic Voter under FoCal
TAP '09 Proceedings of the 3rd International Conference on Tests and Proofs
A Brief Overview of Agda --- A Functional Language with Dependent Types
TPHOLs '09 Proceedings of the 22nd International Conference on Theorem Proving in Higher Order Logics
Development Life-cycle of Critical Software Under FoCaL
Electronic Notes in Theoretical Computer Science (ENTCS)
Invariants for the FoCaL language
Annals of Mathematics and Artificial Intelligence
Zenon: an extensible automated theorem prover producing checkable proofs
LPAR'07 Proceedings of the 14th international conference on Logic for programming, artificial intelligence and reasoning
Functional testing in the focal environment
TAP'08 Proceedings of the 2nd international conference on Tests and proofs
Security rules versus security properties
ICISS'10 Proceedings of the 6th international conference on Information systems security
Certifying airport security regulations using the Focal environment
FM'06 Proceedings of the 14th international conference on Formal Methods
Security policy enforcement through refinement process
B'07 Proceedings of the 7th international conference on Formal Specification and Development in B
Flow based interpretation of access control: detection of illegal information flows
ICISS'11 Proceedings of the 7th international conference on Information Systems Security
Formal specification and validation of security policies
FPS'11 Proceedings of the 4th Canada-France MITACS conference on Foundations and Practice of Security
| Hi-index | 0.00 |
FoCaLiZe is an object-oriented programming environment that combines specifications, programs and proofs in the same language. This paper describes how its features can be used to formally express specifications and to develop by stepwise refinement the design and implementation of secured systems, while proving that the implementation meets its specification or design requirements. We thus obtain a modular implementation of a generic framework for the definition of security policies together with certified enforcement mechanism for these policies.