Reasoning about confidentiality at requirements engineering time

ESEC/FSE'05 - Proceedings of the Joint 10th European Software Engineering Conference (ESEC) and 13th ACM SIGSOFT Symposium on the Foundations of Software Engineering (FSE-13)

Volumn , Issue , 2005, Pages 41-49

  De Landtsheer, Renaud ^a   Van Lamsweerde, Axel ^a  

^a UNIVERSITÉ CATHOLIQUE DE LOUVAIN   (Belgium)

Author keywords

Bounded model checking; Reasoning about confidentiality; Security requirements; Specification patterns

Indexed keywords

CODES (STANDARDS); COMPUTER PROGRAMMING; COMPUTER SOFTWARE; INFORMATION THEORY; MATHEMATICAL MODELS; SEMANTICS;

BOUNDED MODEL CHECKING; REASONING ABOUT CONFIDENTIALITY; SECURITY REQUIREMENTS; SPECIFICATION PATTERNS;

SECURITY SYSTEMS;

EID: 32344449269     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1081706.1081715     Document Type: Conference Paper

References (31)

1. A. Biere, A.Cimatti, E. M. Clarke, O. Strichman, and Y. Zhu, "Bounded model checking", Advances in Computers, 58, 2003.
2. D. Bolignano, "Towards a mechanization of cryptographic protocol verification", Proc. 9th International Computer Aided Verification Conference, 1997, 131-142.
3. http://www.cert.org/stats/cert_stats.html.
4. I. Cervesato, "Data access specification and the most powerful symbolic attacker in msr", In ISSS 2002: Software Security Theories and Systems, LNCS 2609, Springer-Verlag, November 2003, 384-416.
5. M. Chechik and D. O. Paun, "Events in property patterns", In Theoretical and Practical Aspects of SPIN Model Checking, LNCS 1680, Springer-Verlag, 1999, 154-167.
6. R. De Landtsheer, "Solving CSPs including universal quantifications", Proc. of the 2nd Int. Mozart/Oz Conference, 2004.
7. M.B. Dwyer, G. S. Avrunin and J.C. Corbett, "Patterns in Property Specifications for Finite-State Verification", Proc. ICSE'99 - 21st Intl. Conf. Softw. Eng., May 1999.
8. J. Engelfriet, "Monotonicity and persistence in preferential logics", J. Artif. Intell. Res. 8, 1998, 1-21.
9. R. Fagin, J. Y. Halpern, Y. Moses, and M. Y. Vardi. Reasoning About Knowledge. MIT Press, 1995.
10. J. Halpern and Y. Moses, "Towards a Theory of Knowledge and Ignorance: Preliminary Report", In Logics and Models of Concurrent Systems, Springer-Verlag, 1985, 459-476.
11. Halpern J., van der Meyden R., and Vardi. Complete axiomatizations for reasoning about knowledge and time. 1997.
12. J. Jacob, "On the derivation of secure components", In Proc. of 1989 IEEE Symposium on Security and Privacy, Oakland, CA, May 1989.
13. D. Jackson, "Automating first-order relational logic", Proc. FSE'2000: 8th ACM SIGSOFT Intl Symp. Foundations of Software Engineering, San Diego, 2000.
14. M. Jago, N. Alechina, and B. Logan, "A complete and decidable logic for resource bounded agents", Proc. AAMAS 04, New York, July 2004, 606-613.
15. S. Jha, E.M. Clarke and W. Marrero, "Verifying security protocols with Brutus", ACM Trans. Software Engineering and Methodology (TOSEM), October 2000, 443-487.
16. U. Junker, "QUICKXPLAIN: Conflict Detection for Arbitrary Constraint Propagation Algorithms", Proc. IJCAI'01 Workshop on Modeling and Solving Problems with Constraints, 2001.
17. R. Kemmerer, C. Meadows, and J. Millen, "Three systems for cryptographic protocol analysis", Journal of Cryptology 7(2), 1994, 79-130.
18. R. Kemmerer, "Cybersecurity", Proc.ICSE'03 - 25th Intl. Conf. on Softw. engineering, Portland, 2003, 705-715.
19. A. van Lamsweerde and E. Letter, "Handling obstacles in goal-oriented requirements engineering", IEEE Transactions on Software Engineering, Special Issue on Exception Handling, 26(10), October 2000, 978-1005.
20. A. van Lamsweerde, "Goal-oriented requirements engineering: A guided tour". Proc.RE'01 - 5th IEEE International Symposium on Requirements Engineering, Toronto, August 2001, 249-263.
21. A. van Lamsweerde, "From System Goals to Software Architecture", In Formal Methods for Software Architectures, M. Bernardo & P. Inverardi (eds), LNCS 2804, Springer-Verlag, 2003, 25-43.
22. A. van Lamsweerde, "Elaborating security requirements by construction of intentional anti-models", Proc. ICSE'04: 26th Intl. Conf, on Software Engineering, IEEE, 2004, 148-157.
23. th ACM SIGSOFT Symp. Foundations of Software Engineering, Charleston, November 2002.
24. L. Liu, E. Yu and J. Mylopoulos, "Security and Privacy Requirements Analysis within a Social Setting", Proc.RE'03; 11th IEEE International Requirements Engineering Conference, Monterey, Sept. 2003.
25. G. Lowe, "Breaking and fixing the Needham-Schroeder public-key protocol using FOR", in TACAS'96: Tools and Algorithms for Construction and Analysis of Systems, 1996.
26. Z. Manna and A. Pnueli. The Temporal Logic of Reactive and Concurrent Systems. Springer-Verlag, 1992.
27. A. Pnueli, "Verification by Finitary Abstraction", Proc. SPIN'98: 4th Intl. SPIN Workshop, Paris, Nov. 1998.
28. Ch. Schulte. Programming Constraint Services. Lecture Notes in Artificial Intelligence Vol. 2302,. Springer-Verlag, Berlin, 2002.
29. P. Van Roy and S. Haridi, Concepts, Techniques, and Models of Computer Programming. MIT Press, March 2004.
30. J. Viega and G. McGraw. Building Secure Software: How to Avoid Security Problems the Right Way. Addison-Wesley, 2001.
31. J. Wing, "A Symbiotic Relationship Between Formal Methods and Security", Proc. NSF Workshop on Computer Security, Fault Tolerance, and Software Assurance: From Needs to Solution. December 1998.