Modifying security policies for the satisfaction of intransitive non-interference

IEEE Transactions on Automatic Control

Volumn 54, Issue 8, 2009, Pages 1961-1966

  Yeddes, Moez ^a   Lin, Feng ^b,c   Hadj Alouane, Nejib Ben ^a  

^a UNIVERSITY OF MANOUBA   (Tunisia)

^b Wayne State University   (United States)

^c TONGJI UNIVERSITY   (China)

Author keywords

Formal verification; Infimal super language; Intransitive non interference; Maximal sub language; Observability; Security policies

Indexed keywords

FORMAL VERIFICATION; INFIMAL SUPER-LANGUAGE; INTRANSITIVE NON-INTERFERENCE; MAXIMAL SUB-LANGUAGE; SECURITY POLICIES;

NETWORK PROTOCOLS; NETWORK SECURITY; SECURITY SYSTEMS;

LINGUISTICS;

EID: 68949196207     PISSN: 00189286     EISSN: None     Source Type: Journal    
DOI: 10.1109/TAC.2009.2023961     Document Type: Article

References (21)

1. D. Bell and L. LaPadula, Secure Computer System: Unified Exposition and Multics Interpretation Mitre Corp, Bedford, MA, Tech. Rep. MTR-2997, 1976.
2. N. B. Hadj-Alouane, S. Lafrance, F. Lin, J. Mullins, and M. Yeddes, "Characterizing intransitive non-interference in security policies with observability," IEEE Trans. Automat. Control, vol. 50, no. 6, pp. 920-925, Jun. 2005.
3. N. B. Hadj-Alouane, S. Lafrance, F. Lin, J. Mullins, and M. Yeddes, "On the verification of intransitive noninterference in multilevel security," IEEE Trans. Syst., Man Cybern. B, vol. 35, no. 5, pp. 948-958, Oct. 2005.
4. F. Cassez, J. Mullins, and O. H. Roux, "Synthesis of non-interferent systems," in Proc. 4th Int. Conf. Math. Methods, Models Architect. Comput. Network Security (MMM-ACNS'07), Sep. 2007, vol. 1, pp. 307-321.
5. H. Cho and S. I. Marcus, "Supremal and maximal sublanguages arising in supervisor synthesis problem with partial observation," Math. Syst. Theory, vol. 22, pp. 177-211, 1989.
6. R. Focardi, A. Ghelli, and R. Gorrieri, "Using non interference for the analysis of security protocol," in Proc. DIMACS Workshop Design Formal Verification Security Protocols, 1997, pp. 285-327.
7. R. Focardi and R. Gorrieri, "A classification of security properties for process algebras," J. Comput. Security, vol. 3, no. 1, pp. 5-33, 1995.
8. G. Gardey, J. Mullins, and O. H. Roux, "Non-interference control synthesis for security timed automata," in Proc. 3rd Int.Workshop Security Issues Concurrency (SecCo'05), San Francisco, CA, Aug. 2005, vol. 1, pp. 35-53.
9. J. Goguen and J. Meseguer, "Security policies and security models," in Proc. IEEE Symp. Res. Security Privacy, Apr. 1982, pp. 11-20.
10. J. T. Haigh, R. A. Kemmerer, J. McHugh, and W. D. Young, "An experience using two covert channel analysis techniques on a real system design," IEEE Trans. Software Eng., vol. SE-13, no. 2, pp. 157-168, Feb. 1987.
11. F. Lin and W. M. Wonham, "On observability of discrete-event systems," Inform. Sci., vol. 44, pp. 173-198, 1988.
12. J. McLean, "A general theory of composition for a class of possibilistic properties," IEEE Trans. Software Eng., vol. 22, no. 1, pp. 53-66, Jan. 1996.
13. J. Mullins, "Nondeterministic admissible interference," J. Universal Comput. Sci., vol. 6, no. 11, pp. 1054-1070, 2000.
14. J. Mullins and S. Lafrance, "Bisimulation-based non-deterministic admissible interference with applications to the analysis of cryptographic protocols," in Int. J. Inform. Software Technol., pp. 1-25, 2002.
15. K. Rudie and W. M. Wonham, "The infimal prefix-closed and observable superlanguage of a given language," Syst. Control Lett., vol. 15, pp. 361-371, 1990.
16. A. W. Roscoe, "CSP and determinism in security modelling," in Proc. IEEE Symp. Res. Security Privacy, 1995, pp. 0114-0114.
17. A. W. Roscoe and M. H. Goldsmith, "What is intransitive noninterference," in Proc. 12th IEEE Computer Security Foundations Workshop, 1999, pp. 228-238.
18. J. Rushby, Noninterference, Transitivity and Channel-Control Security Policies SRI International, Menlo Park, CA, Tech. Rep. CSL-92-02, 1992.
19. P. Ryan and S. Schneider, "Process algebra and non-interference," in Proc. CSFW-12, Mordano, Italy, Jun. 1999, pp. 214-227.
20. R. Van Der Meyden, "What, indeed, is intransitive noninterference?," in Proc. Comput. Security (ESORICS'07), 2008, vol. 4734, pp. 235-250.
21. D. Von Oheimb, "Information flow control revisited: Noninfluence.. noninterference + nonleakage," in Proc. Computer Security (ESORICS'04), 2004, vol. 3193, pp. 225-243.