Security check: A formal yet practical framework for secure software architecture

Proceedings New Security Paradigms Workshop

Volumn , Issue , 2004, Pages 59-67

  Ray, Arnab ^a  

^a Stony Brook University   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER SOFTWARE; LIFE CYCLE; LOGIC CIRCUITS; MATHEMATICAL MODELS; REAL TIME SYSTEMS; SECURITY OF DATA; SET THEORY;

MODEL CHECKING; SECURITY CHECKS; TEMPORAL LOGIC; UNIT VERIFICATION;

COMPUTER ARCHITECTURE;

EID: 17644404813     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (26)

1. B. Alpern and F. Schneider. Recognizing safety and liveness. Distributed Computing, 2(3): 117-126, 1987.
2. Thomas Ball and Sriram K. Rajamani. Bebop: A symbolic model checker for boolean programs. SPIN 2000 Workshop on Model Checking of Software, 2000.
3. E.M. Clarke, O. Grumberg, and D.A. Peled. Model Checking. MIT Press, Cambridge, Massachusetts, 2000.
4. R. Cleaveland, E. Madelaine, and S. Sims. A front-end generatorfor verification tools, pages 153-173.
5. R. Cleaveland, J. Parrow, and B. Steffen. The Concurrency Workbench: A semantics-based tool for the verification of finite-state systems. ACM Transactions on Programming Languages and Systems, 15(1):36-72, January 1993.
6. R. Cleaveland and S. Sims. The NCSU Concurrency Workbench, pages 394-397.
7. D.Harel. Statecharts:a visual formalism for complex systems. Science of Computer Programming,8, pages 231-274, 1987.
8. Dawson Engler, Benjamin Chelf, Andy Chou, and Seth Hallem. Checking system rules using system-specific, programmer-written compiler extensions. Operating Systems Design and Implementation, 2002.
9. David Evans, John Guttag, Jim Horning, and Yang Meng Tan. Lclint: A tool for using specifications to check code. SIGSOFT Symposium on the Foundations of Software Engineering, December 1994.
10. J.-C. Fernandez. An implementation of an efficient algorithm for bisimulation equivalence. Science of Computer Programming, 13:219-236, 1989/1990.
11. R. Focardi and R. Gorrieri. The compositional security checkeratool for the verification of information flow security policies. IEEE Transactions on Software Engineering 23(9):550-571, September 1997.
12. Thomas A. Henzinger, Ranjit Jhala, Rupak Majumdar, and Gregoire Sutre. Lazy abstraction. ACM Principles Of Programming Languages, 2002.
13. P. Kanellakis and S.A. Smolka. CCS expressions, finite state processes, and three problems of equivalence. Information and Computation, 86(1):43-68, May 1990.
14. D. Kozen. Results on the prepositional μ-calculus. Theoretical Computer Science, 27(3):333-354, December 1983.
15. Z. Manna and A. Pnueli. The Temporal Logic of Reactive and Concurrent Systems. Springer-Verlag, Berlin, 1992.
16. Faron Moller and Chris Tofts. A temporal calculus of communicating systems. Proceedings of CONCUR '90, 1990.
17. R. Paige and R.E. Tarjan. Three partition refinement algorithms. SIAM Journal of Computing, 16(6):973-989, December 1987.
18. G.D. Plotkin. A structural approach to operational semantics. Technical Report DAIMI-FN-19, Computer Science Department, Aarhus University, Aarhus, Denmark, 1981.
19. th Annual Symposium on Foundations of Computer Science, pages 46-57, Providence, Rhode Island, October/November 1977. IEEE.
20. Arnab Ray and Rance Cleaveland. Unit verification: The cara experiences. To be published in Software Tools For Technology Transfer.
21. R.Cleaveland and S.Sims, Generic tools for verifying concurrent systems. Science of Computer Programming, 41(1):39-47, 2002.
22. R.Milner. A calculus of communicating systems. Lecture Notes in Computer Science, 1980.
23. Fred Schneider. A language-based approach to security. informatics: 10 years back, 10 years ahead. Lecture Notes in Computer Science, Volume 2000 (Reihnard Wilhelm, ed.), Springer-Verlag, 2000.
24. Fred Schneider. Enforcable security policies. ACM Transactions on Information and System Security, January 2000.
25. R. Sekar and P. Uppuluri. Synthesizing fast intrusion detection/prevention systems from high-level specifications. USENIX Security Symposium, 1999.
26. F. Simon. Aggregation and separation as non-interference properties. The Journal Of Computer Security, 1(2): 159-188, 1992., 1992.