Formal security policy verification of distributed component-structured software

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2767, Issue , 2003, Pages 257-272

  Herrmann, Peter ^a  

^a TU DORTMUND UNIVERSITY   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COMPLIANCE CONTROL; NETWORK SECURITY; SECURITY SYSTEMS; SPECIFICATIONS; VERIFICATION;

ACCESS CONTROL POLICIES; BEHAVIOR CONSTRAINTS; DISTRIBUTED COMPONENTS; ROLE-BASED ACCESS CONTROL; SECURITY PROPERTIES; SPECIFICATION FRAMEWORKS; SPECIFICATION PATTERNS; SPECIFICATION TECHNIQUE;

ACCESS CONTROL;

EID: 35248838889     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-39979-7_17     Document Type: Article

References (28)

1. Szyperski, C.: Component Software - Beyond Object Oriented Programming. Addison-Wesley Longman (1997)
2. Beugnard, A., Jézéquel, J.M., Plouzeau, N., Watkins, D.: Making Components Contract Aware. IEEE Computer 32 (1999) 38-45
3. Lindqvist, U., Jonsson, E.: A Map of Security Risks Associated with Using COTS. IEEE Computer 31 (1998) 60-66
4. Herrmann, P.: Trust-Based Procurement Support for Software Components. In: Proceedings of the 4th International Conference on Electronic Commerce Research (ICECR-4), Dallas, ATSMA, IFIP (2001) 505-514
5. Herrmann, P., Krumm, H.: Trust-adapted enforcement of security policies in distributed component-structured applications. In: Proceedings of the 6th IEEE Symposium on Computers and Communications, Hammamet, IEEE Computer Society Press (2001) 2-8
6. Herrmann, P., Wiebusch, L., Krumm, H.: State-Based Security Policy Enforcement in Component-Based E-Commerce Applications. In: Proceedings of the 2nd IFIP Conference on E-Commerce, E-Business & E-Government (I3E), Lisbon, Kluwer Academic Publisher (2002) 195-209
7. Fraser, T., Badger, L., Feldman, M.: Hardening COTS Software with Generic Software Wrappers. In: Proceedings of the 1999 IEEE Symposium on Security and Privacy, IEEE Computer Society Press (1999) 2-16
8. Herrmann, P.: Trust-Based Protection of Software Component Users and Designers. In Nixon, P., Terzis, S., eds.: Proceedings of the 1st International Conference on Trust Management. LNCS 2692, Heraklion, Springer-Verlag (2003) 75-90
9. Khan, K., Han, J., Zheng, Y.: A Framework for an Active Interface to Characterise Compositional Security Contracts of Software Components. In: Proceedings of the Australian Software Engineering Conference (ASWEC'01), Canberra, IEEE Computer Society Press (2001) 117-126
10. ISO/IEC: Common Criteria for Information Technology Security Evaluation. (1998) International Standard ISO/IEC 15408.
11. Ferraiolo, D.F., Sandhu, R., Gavrila, S., Kuhn, D.R., Chandramouli, R.: Proposed NIST Standard for Role-Based Access Control. ACM Transactions on Information and System Security 4 (2001) 224-274
12. Herrmann, P., Krumm, H.: A Framework for Modeling Transfer Protocols. Computer Networks 34 (2000) 317-337
13. Vissers, C.A., Scollo, G., van Sinderen, M.: Architecture and specification style in formal descriptions of distributed systems. In Agarwal, S., Sabnani, K., eds.: Protocol Specification, Testing and Verification. Volume VIII., Elsevier, IFIP (1988) 189-204
14. Back, R.J.R., Kurkio-Suonio, R.: Decentralization of process nets with a centralized control. Distributed Computing (1989) 73-87
15. Herrmann, P., Krumm, H., Drögehorn, O., Geisselhardt, W.: Framework and Tool Support for Formal Verification of High Speed Transfer Protocol Designs. Telecommunication Systems 20 (2002) 291-310
16. Herrmann, P., Krumm, H.: Modular Specification and Verification of XTP. Telecommunication Systems 9 (1998) 207-221
17. Lamport, L.: The Temporal Logic of Actions. ACM Transactions on Programming Languages and Systems 16 (1994) 872-923
18. Alpern, B., Schneider, F.B.: Defining liveness. Information Processing Letters 21 (1985) 181-185
19. Heyl, C., Mester, A., Krumm, H.: etc - A Tool Supporting the Construction of cTLA-Specifications. In Margaria, T., Steffen, B., eds.: Tools and Algorithms for the Construction and Analysis of Systems. Number 1055 in Lecture Notes in Computer Science, Springer-Verlag (1996) 407-411
20. Graw, G., Herrmann, P., Krumm, H.: Constraint-Oriented Formal Modelling of OO-Systems. In: Second IFIP WG 6.1 International Working Conference on Distributed Applications and Interoperable Systems (DAIS 99), Helsinki, Kluwer Academic Publisher (1999) 345-358
21. Ferraiolo, D.F., Barkley, J.F., Kuhn, D.R.: A Role Based Access Control Model and Reference Implementation within a Corporate Intranet. ACM Transactions on Information Systems Security 1 (1999) 34-64
22. Osborn, S.L., Sandhu, R.S., Munawer, Q.: Configuring Role-Based Access Control to Enforce Mandatory and Discretionary Access Control Policies. ACM Transactions on Information and System Security 3 (2000) 85-106
23. Zöllner, J., Federrath, H., Klimant, H., Pfitzmann, A., Piotraschke, R., Westfeld, A., Wicke, G., Wolf, G.: Modeling the security of steganographic systems. In: Proceedings of the 2nd Workshop of Information Hiding. LNCS 1525, Portland, Springer-Verlag (1998) 345-355
24. Schmitz, L.: The SalesPoint Framework - Technical Overview. Available via WWW: ist.unibw-muenchen.de/Lectures/SalesPoint/overview/english/ TechDoc.htm (1999)
25. OBI Consortium: OBI Technical Specifications - Open Buying on the Internet. Draft release v2.1 edn. (1999)
26. Ferrari, E., Samarati, P., Bertino, E., Jajodia, S.: Providing flexibility in information flow control for object-oriented systems. In: Proceedings of the IEEE Symposium on Security and Privacy, Oakland (1997) 130-140
27. Myers, A.C., Liskov, B.: Complete, Safe Information with Decentralized Labels. In: Proceedings of the IEEE Symposium on Security and Privacy, Oakland (1998) 186-197
28. Herrmann, P.: Information Flow Analysis of Component-Structured Applications. In: Proceedings of the 17th Annual Computer Security Applications Conference (ACSAC'2001), New Orleans, ACM SIGSAC, IEEE Computer Society Press (2001) 45-54