Enforcing security and safety models with an information flow analysis tool

Proceedings of the ACM SIGAda Annual International Conference; SIGAda

Volumn , Issue , 2004, Pages 39-45

  Chapman, Roderick ^a   Hilton, Adrian ^a  

^a Praxis Critical Systems Ltd   (United Kingdom)

Author keywords

Bell LaPadula; Dolev Yao; Information flow; Safety; Security; SPARK Ada

Indexed keywords

ADA (PROGRAMMING LANGUAGE); COMPUTER SOFTWARE; DATA REDUCTION; INFORMATION ANALYSIS; MATHEMATICAL MODELS; PASCAL (PROGRAMMING LANGUAGE); SECURITY OF DATA; SEMANTICS;

BELL-LAPADULLA MODELS; DOLEV-YAO SECURITY MODELS; INFORMATION FLOW ANALYSIS TOOL; SAFETY LEVELS; SPARK ANALYSIS;

SOFTWARE ENGINEERING;

EID: 19544375598     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1046191.1032305     Document Type: Conference Paper

References (11)

1. R. J. Anderson. Security engineering: a guide to building dependable distributed systems. Wiley Computer Publishing, 2001. ISBN 0-471-38922-6.
2. J. Barnes. High Integrity Software: The SPARK Approach to Safety And Security, Addison Wesley, April 2003.
3. D. E. Bell and L. LaPadula. Secure computer systems. Technical Report ESR-TR-73-278, Mitre Corporation, November 1973. v. I and II.
4. J.-F. Bergeretti and B. A. Carré. Information-flow and data-flow analysis of while-programs. ACM Transactions on Programming Languages and Systems, 7(1):37-61, January 1985.
5. Common Criteria. Common Criteria for Information Technology Security Evaluation, August 1999.
6. D. Dolev and A. Yao. On the security of public-key protocols. IEEE Transactions on Information Theory, 2(29):198-208, August 1983.
7. A. Hall and R. Chapman. Correctness by construction; Developing a commercial secure system. IEEE Software, pages 18-25, Jan/Feb 2002.
8. International Electrotechnical Commission. IEC Standard 61508, Functional Safety of Electrical / Electronic / Programmable Electronic Safety-Related Systems, March 2000.
9. S. King, J. Hammond, R. Chapman, and A. Pryor. Is proof more cost effective than testing? IEEE Transactions on Software Engineering, 26(8):675-686, August 2000.
10. RTCA / EUROCAE. RTCA DO-178B / EUROCAE ED-12: Software Considerations in Airborne Systems and Equipment Certification, December 1992.
11. A. Sabelfeld and A. C. Myers. Language-based information-flow security. IEEE Journal on Selected Areas in Communications, 21(1), January 2003.