A formal approach to the integrated analysis of security and QoS

Reliability Engineering and System Safety

Volumn 92, Issue 11, 2007, Pages 1503-1520

  Aldini, Alessandro ^a   Bernardo, Marco ^a  

^a UNIVERSITY OF URBINO   (Italy)

Author keywords

Case studies; Formal methods; Noninterference; Process algebra; QoS; Security; Tools

Indexed keywords

ALGEBRA; DISTRIBUTED COMPUTER SYSTEMS; FORMAL METHODS; INFORMATION ANALYSIS; QUALITY OF SERVICE;

INTEGRATED ANALYSIS; NONINTERFERENCE; PERFORMABILITY; SECURITY GUARANTEES;

SECURITY OF DATA;

EID: 34447102446     PISSN: 09518320     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.ress.2006.10.003     Document Type: Article

References (27)

1. Moskowitz I.S., and Kang M.H. Covert channels-here to stay?. Ninth conference on computer assurance (Compass'94) (1994), National Institute of Standards and Technology 235-244
2. Ryan P.Y.A., McLean J., Millen J., and Gligor V. Non-interference: who needs it?. 14th computer security foundations workshop (CSFW'01) (2001), IEEE CS Press 237-238
3. Aldini A., and Gorrieri R. Security analysis of a probabilistic non-repudiation protocol. Second workshop on process algebra and performance modelling, probabilistic methods in verification (PAPM-ProbMiV'02). Lecture notes in computer science 2399 (2002), Springer, Berlin 17-36
4. Aldini A., Bravetti M., and Gorrieri R. A process-algebraic approach for the analysis of probabilistic noninterference. J Comput Secur 12 (2004) 191-245
5. Stravridou V, Dutertre B. From Security to Safety and Back, in: second workshop on computer security, fault tolerance, and software assurance: from needs to solutions, Williamsburg, VA, 1998.
6. Goguen JA, Meseguer J. Security policy and security models. in: Symposium on security and privacy (SSP'82). IEEE CS Press; 1982. p. 11-20.
7. Focardi R., and Gorrieri R. A classification of security properties. J Comput Secur 3 (1995) 5-33
8. Stewart W.J. Introduction to the numerical solution of Markov chains (1994), Princeton University Press, Princeton, NJ
9. In: Lavenberg S.S. (Ed). Computer performance modeling handbook (1983), Academic Press, New York
10. Bernardo M., Donatiello L., and Ciancarini P. Stochastic process algebra: from an algebraic formalism to an architectural description language, performance evaluation of complex systems: techniques and tools. Lecture notes in computer science 2459 (2002), Springer, Berlin p. 236-60
11. Bernardo M. TwoTowers 5.1 user manual. 〈http://www.sti.uniurb.it/bernardo/twotowers/〉, 2006.
12. Kang MH, Moore AP, Moskowitz IS. Design and assurance strategy for the NRL Pump, NRL memo 5540-97-7991, Naval Research Laboratory, Washington, DC, 1997. IEEE Comput Mag 1998;31:56-64.
13. On G., Schmitt J., and Steinmetz R. On availability QoS for replicated multimedia service and content. Joint workshops on interactive distributed multimedia systems and protocols for multimedia systems (IDMS-PROMS'02). Lecture notes in computer science 2515 (2002), Springer, Berlin 313-326
14. Lanotte R., Maggiolo-Schettini A., Tini S., Troina A., and Tronci E. Automatic analysis of the NRL Pump, selected papers from MEFISTO project "Formal Methods for Security". ENTCS 99 (2004) 245-266
15. Aldini A., and Bernardo M. An integrated view of security analysis and performance evaluation: trading QoS with covert channel bandwidth. 23rd conference on computer safety, reliability and security (SAFECOMP'04). Lecture notes in computer science 3219 (2004), Springer, Berlin 283-296
16. Aldini A., and Bernardo M. TwoTowers 4.0: towards the integration of security analysis and performance evaluation. First conference on quantitative evaluation of systems (QEST'04) (2004), IEEE CS Press 336-337
17. Meadows C. What makes a cryptographic protocol secure? The evolution of requirements specification in formal cryptographic protocol analysis. 12th European symposium on programming languages and systems (ESOP'03). Lecture notes in computer science 2618 (2003), Springer, Berlin 10-21
18. Di Vito B.L. A model of cooperative noninterference for integrated modular avionics. Seventh conference on dependable computing for critical applications (DCCA-7) (1999), IEEE CS Press 269-286
19. Simpson A., Woodcock J., and Davies J. Safety through security. Ninth workshop on software specification and design (IWSSD-9) (1998), IEEE CS Press 18-24
20. Acquaviva A., Aldini A., Bernardo M., Bogliolo A., Bonta E., and Lattanzi E. Assessing the impact of dynamic power management on the functionality and the performance of battery-powered appliances. Fifth conference on dependable systems and networks (DSN'04)-performance and dependability symposium (2004), IEEE CS Press 731-740
21. Milner R. Communication and concurrency (1989), Prentice-Hall, Englewood Cliffs, NJ
22. Cavada R, Cimatti A, Olivetti E, Pistore M, Roveri M. NuSMV 2.1 user manual, 〈http://nusmv.irst.itc.it/〉, 2002.
23. Bernardo M., and Bravetti M. Performance measure sensitive congruencies for Markovian process algebras. Theor Comput Sci 290 (2003) 117-160
24. Lowe G. Quantifying information flow. In: 15th computer security foundation workshop (CSFW'02). IEEE CS Press; 2002. p. 18-31.
25. Di Pierro A., Hankin C., and Wiklicky H. Approximate non-interference. J Comput Secur 12 (2004) 37-81
26. Focardi R., Gorrieri R., and Martinelli F. Real-time information flow analysis. J Sel Areas Commun 21 (2003) 20-35
27. Lanotte R., Maggiolo-Schettini A., and Troina A. A classification of time and/or probability dependent security properties. In: Workshop on quantitative aspects of programming languages (QAPL05) (2005) 33-47