Concrete and Abstract Semantics to Check Secure Information Flow in Concurrent Programs

  • Authors:
  • Cinzia Bernardeschi;Nicoletta De Francesco;Giuseppe Lettieri

  • Affiliations:
  • Dipartimento di Ingegneria della Informazione, Università di Pisa, Italy;Dipartimento di Ingegneria della Informazione, Università di Pisa, Italy;Dipartimento di Ingegneria della Informazione, Università di Pisa, Italy

  • Venue:
  • Fundamenta Informaticae - Concurrency Specification and Programming (CS&P 2003)
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

This paper presents a technique for verifying secure information flow in concurrent programs consisting of a number of independently executing sequential processes with private memory. Communications between processes are synchronous. Moreover, processes are open systems that can accept inputs from the environment and produce outputs towards the environment. The technique is based on an abstract interpretation. First we define a concrete instrumented semantics where each value is annotated with the security level of the information on which it depends. Then we define an abstract semantics of the language that abstracts from actual data and maintains only the annotations on the security level.