Towards an integrated formal analysis for security and trust

Lecture Notes in Computer Science

Volumn 3535, Issue , 2005, Pages 115-130

  Martinelli, Fabio ^a  

^a Istituto di informatica e telematica del Consiglio nazionale delle ricerche   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PROCESSING; NETWORK PROTOCOLS; PUBLIC POLICY; SECURITY OF DATA; ACCESS CONTROL; MACHINERY; MOBILE SECURITY; NETWORK SECURITY;

ACCESS CONTROL POLICIES; INTEGRATED FORMAL ANALYSIS; SECURITY PROTOCOLS; DYNAMIC SCENARIOS; FORMAL VERIFICATION OF SECURITY; INTEGRATED FRAMEWORKS; SECURITY AND TRUSTS; TRUST MANAGEMENT;

LARGE SCALE SYSTEMS; FORMAL METHODS;

EID: 26444544547     PISSN: 03029743     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1007/11494881_8     Document Type: Conference Paper

References (29)

1. M. Abadi and A. D. Gordon. A calculus for cryptographic protocols: The spi calculus. Information and Computation, 148(1): 1-70, 1999.
2. P. A. Bonatti and P. Samarati. Logics for authorizations and security. In Logics for Emerging Applications of Databases, LNCS. Springer-Verlag, 2003.
3. R. Dingledine and P. F. Syverson, editors. Privacy Enhancing Technologies, Second International Workshop, PET 2002, San Francisco, CA, USA, April 14-15, 2002, Revised Papers, volume 2482 of Lecture Notes in Computer Science. Springer, 2003.
4. R. Focardi and R. Gorrieri. Classification of security properties (part i: Information flow). In Foundations of Security Analysis and Design, volume 2171 of Lecture Notes in Computer Science, pages 331-396, 2001.
5. R. Focardi, R. Gorrieri, and F. Martinelli. Non interference for the analysis of cryptographic protocols. In Proceedings of 27th International Colloquium in Automata, Languages and Programming, volume 1853 of Lectures Notes in Computer Science, pages 354-372, 2000.
6. R. Focardi, R. Gorrieri, and F. Martinelli. Classification of security properties - Part II: Network security. In FOSAD school Lectures, volume 2946 of LNCS. Springer-Verlag, 2004.
7. R. Focardi and F. Martinelli. A uniform approach for the definition of security properties. In Proceedings of World Congress on Formal Methods (FM'99), volume 1708 of Lecture Notes in Computer Science, pages 794-813, 1999.
8. J. A. Goguen and J. Meseguer. Security policy and security models. In Proceedings of the 1982 Symposium on Security and Privacy, pages 11-20. IEEE Computer Society Press, 1982.
9. J. D. Guttman, F. J. Thayer, J. A. Carlson, J. C. Herzog, J. D. Ramsdell, and B. T. Sniffen. Trust management in strand spaces: A rely-gurantee method. In Proceedings of the European Symposium on Programming (ESOP), LNCS, 2004.
10. Halpern and van der Meyden. A logic for SDSI's linked local name spaces. In PCSFW: Proceedings of The 12th Computer Security Foundations Workshop. IEEE Computer Society Press, 1999.
11. A. Josang. The consensus operator for combining beliefs. Artif. Intell., 141(1):157-170, 2002.
12. st workshop on Formal Aspects in Security and Trust (FAST2003), 2003.
13. D. Kindred and J. M. Wing. Fast, automatic checking of security protocols. In Second USENIX Workshop on Electronic Commerce, pages 41-52, Oakland, California, 1996.
14. N. Li, J. Mitchell, and W. H. Winsborough. Beyond proof-of-compliance: Safety and availability analysis in trust management. In IEEE Symposium on Research in Security and Privacy. 2003.
15. N. Li and M. V. Tripunitara. Security analysis in role-based access control. In ACM Symposium on Access Control Models and Techniques (SACMAT 2004). 2004.
16. N. Li, W. H. Winsborough, and J. C. Mitchell. Distributed credential chain discovery in trust management. Journal of Computer Security, 1:35-86, 2003.
17. G. Lowe. Breaking and fixing the Needham Schroeder public-key protocol using FDR. In Proceedings of Tools and Algorithms for the Construction and the Analisys of Systems, volume 1055 of Lecture Notes in Computer Science, pages 147-166. Springer Verlag, 1996.
18. F. Martinelli. Towards a uniform framework for the formal analysis for security and trust. Technical Report IIT, 2004. A position paper has been presented at 2nd Workshop on Ubiquitious Networking (Cambridge, UK-Ubinet 2004).
19. F. Martinelli. Languages for description and analysis of authentication protocols. In P. Degano and U. Vaccaro, editors, Proceedings of 6th Italian Conference on Theoretical Computer Science, pages 304-315. World Scientific, 1998.
20. F. Martinelli. Symbolic semantics and analysis for crypto-ccs with (almost) generic inference systems. In Proceedings of the 27th international Symposium in Mathematical Foundations of Computer Sciences(MFCS'02), volume 2420 of LNCS, pages 519-531, 2002.
21. F. Martinelli. Analysis of security protocols as open systems. Theoretical Computer Science, 290(1):1057-1106, 2003.
22. F. Martinelli, M. Petrocchi, and A. Vaccarelli. PaMoChSA: A tool for verification of security protocols based on partial model checking. 2001. Tool Demo at the 1st International School on Formal Methods for the Design of Computer, Communication and Software Systems: Process Algebras.
23. R. Milner. Communication and Concurrency. International Series in Computer Science. Prentice Hall, 1989.
24. P. Samarati and S. D. C. di Vimercati. Access control: Policies, models, and mechanisms. In R. Focardi and R. Gorrieri, editors, Foundations of Security Analysis and Design, LNCS 2171. Springer-Verlag, 2001.
25. R. Sandhu, V. Bhamidipati, E. Coyne, S. Ganta, and C. Youman. The arbac97 model for role-based administration of roles: preliminary description and outline. In Proceedings of the second ACM workshop on Role-based access control, pages 41-50. ACM Press, 1997.
26. J. Vollbrecht, P. Calhoun, S. Farrell, L. Gommans, G. Gross, B. de Bruijn, B. C. de Laat, M. Holdrege, and D. Spence. RFC 2904 AAA authorization framework. 2000.
27. W. H. Winsborough and N. Li. Towards practical automated trust negotiation. In IEEE 3rd Intl. Workshop on Policies for Distributed Systems and Networks (Policy), 2002.
28. W. H. Winsborough and N. Li. Safety in automated trust negotiation. In IEEE Symposium on Security and Privacy. 2004.
29. M. Winslett. An introduction to automated trust negotiation. In Workshop on Credential-Based Access Control Dortmund, October 2002.