Abstract Interpretation and Model Checking for Checking Secure Information Flow in Concurrent Systems

Authors:
Nicolette De Francesco;Antonella Santone;Luca Tesei
Affiliations:
Dipartimento di Ingegneria della Informazione, Università di Pisa, Italy;RCOST - Research Centre on Software Technology, University of Sannio, Benevento, Italy;Dipartimento di Informatica, Università di Pisa, Italy
Venue:
Fundamenta Informaticae - Concurrency Specification and Programming (CS&P'2002), Part 1
Year:
2003

Citing 19
Cited 1

Communicating sequential processes

Communicating sequential processes
Introduction to the ISO specification language LOTOS

Computer Networks and ISDN Systems - Special Issue: Protocol Specification and Testing
Abstract interpretation: a semantics-based tool for program analysis

Handbook of logic in computer science (vol. 4)
Data flow analysis is model checking of abstract interpretations

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Secure information flow in a multi-threaded imperative language

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
The SLam calculus: programming with secrecy and integrity

POPL '98 Proceedings of the 25th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
A core calculus of dependency

Proceedings of the 26th ACM SIGPLAN-SIGACT symposium on Principles of programming languages
Selective mu-calculus and formula-based equivalence of transition systems

Journal of Computer and System Sciences
A semantic approach to secure information flow

Science of Computer Programming - Special issue on mathematics of program construction
A sound type system for secure flow analysis

Journal of Computer Security
An Axiomatic Approach to Information Flow in Programs

ACM Transactions on Programming Languages and Systems (TOPLAS)
Certification of programs for secure information flow

Communications of the ACM
Abstract interpretation of operational semantics for secure information flow

Information Processing Letters
A Per Model of Secure Information Flow in Sequential Programs

ESOP '99 Proceedings of the 8th European Symposium on Programming Languages and Systems
Compile-Time Detection of Information Flow in Sequential Programs

ESORICS '94 Proceedings of the Third European Symposium on Research in Computer Security
The Impact of Synchronisation on Secure Information Flow in Concurrent Programs

PSI '02 Revised Papers from the 4th International Andrei Ershov Memorial Conference on Perspectives of System Informatics: Akademgorodok, Novosibirsk, Russia
The NCSU Concurrency Workbench

CAV '96 Proceedings of the 8th International Conference on Computer Aided Verification
Eliminating Covert Flows with Minimum Typings

CSFW '97 Proceedings of the 10th IEEE workshop on Computer Security Foundations
A New Type System for Secure Information Flow

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations

Concrete and Abstract Semantics to Check Secure Information Flow in Concurrent Programs

Fundamenta Informaticae - Concurrency Specification and Programming (CS&P 2003)

Quantified Score

Hi-index	0.00

Visualization

Abstract

We propose a method to check secure information flow in concurrent programs with synchronization. The method is based on the combination of abstract interpretation and model checking: by abstract interpretation we build a finite representation (transition system) of the behavior of the program. Then we model check the the abstract transition system with respect to the security properties, expressed by a set of temporal logic formulae. The approach allows certifying more programs than previous methods do. The main point is that we are able to check more carefully the scope of indirect information flows.