Runtime enforcement monitors: Composition, synthesis, and enforcement abilities

Formal Methods in System Design

Volumn 38, Issue 3, 2011, Pages 223-262

  Falcone, Yliès ^a   Mounier, Laurent ^a   Fernandez, Jean Claude ^a   Richier, Jean Luc ^b  

^a VERIMAG   (France)

^b GRENOBLE INSTITUTE OF TECHNOLOGY   (France)

Author keywords

Composition; Monitor; Monitor synthesis; Runtime enforcement; Safety progress classification

Indexed keywords

CONTROL STATE; ENFORCEMENT MECHANISMS; FINITE SET; MEMORY DEVICE; MONITOR; MONITOR SYNTHESIS; RESPONSE PROPERTIES; RUNTIMES; SAFETY-PROGRESS CLASSIFICATION;

EID: 79960012024     PISSN: 09259856     EISSN: None     Source Type: Journal    
DOI: 10.1007/s10703-011-0114-4     Document Type: Article

References (27)

1. Havelund K, Goldberg A (2008) Verify your runs. In: Verified software: theories, tools, experiments: first IFIP TC 2/WG 2.3 conference, revised selected papers and discussions, VSTTE 2005, Zurich, Switzerland, October 10-13, 2005, pp 374-383
2. Leucker M, Schallhart C (2009) A brief account of runtime verification. J Log Algebr Program 78:293-303
3. Schneider FB (2000) Enforceable security policies. ACM Trans Inf Syst Secur 3:30-50
4. Hamlen KW, Morrisett G, Schneider FB (2006) Computability classes for enforcement mechanisms. ACM Trans Program Lang Syst 28:175-205 (Pubitemid 43943421)
5. ViswanathanM(2000) Foundations for the run-time analysis of software systems. PhD thesis, University of Pennsylvania, Philadelphia, PA, USA, Supervisor-Sampath Kannan and Supervisor-Insup Lee
6. Ligatti J, Bauer L, Walker D (2009) Run-time enforcement of nonsafety policies. ACM Trans Inf Syst Secur 12
7. Ligatti J, Bauer L, Walker D (2005) Enforcing non-safety security policies with program monitors. In: ESORICS, pp 355-373
8. Fong PWL (2004) Access control by tracking shallow execution history. In: Proceedings of the 2004 IEEE symposium on security and privacy. IEEE Computer Society Press, Los Alamitos, pp 43-55
9. Manna Z, Pnueli A (1987) A hierarchy of temporal properties. In: PODC'87: proceedings of the sixth annual ACM symposium on principles of distributed computing. ACM, New York, pp 205-205
10. Chang EY, Manna Z, Pnueli A (1992) Characterization of temporal property classes. In: Automata, languages and programming, pp 474-486
11. Lamport L (1977) Proving the correctness of multiprocess programs. IEEE Trans Softw Eng 3:125-143
12. Alpern B, Schneider FB (1985) Defining liveness. Inf Process Lett 21:181-185
13. Falcone Y, Fernandez JC, Mounier L (2008) Synthesizing enforcement monitors wrt the safety-progress classification of properties. In: Sekar R, Pujari AK (eds) ICISS. Lecture notes in computer science, vol 5352, pp 41-55
14. Chang E, Manna Z, Pnueli A (1992) The safety-progress classification. Technical report, Stanford University, Dept of Computer Science
15. Streett RS (1981) Propositional dynamic logic of looping and converse. In: STOC'81: proceedings of the thirteenth annual ACM symposium on theory of computing. ACM, New York, pp 375-383
16. Falcone Y, Fernandez JC, Mounier L (2009) Runtime verification of safety-progress properties. In: Bensalem S, Peled D (eds) RV. Lecture notes in computer science, vol 5779. Springer, Berlin, pp 40-59
17. Hamlen KW (2006) Security policy enforcement by automated program-rewriting. PhD thesis, Cornell University
18. Ligatti JA (2006) Policy enforcement via program monitoring. PhD thesis, Princeton University
19. Bauer L, Ligatti J, Walker D (2009) Composing expressive runtime security policies. ACM Trans Softw Eng Methodol 18
20. Martinelli F, Matteucci I (2007) Through modeling to synthesis of security automata. Electron Notes Theor Comput Sci 179:31-46 (Pubitemid 46970908)
21. Matteucci I (2007) Automated synthesis of enforcing mechanisms for security properties in a timed setting. Electron Notes Theor Comput Sci 186:101-120 (Pubitemid 47001809)
22. Erlingsson U, Schneider FB (2000) IRM enforcement of Java stack inspection. In: IEEE symposium on security and privacy, pp 246-255
23. Erlingsson U, Schneider FB (2000) SASI enforcement of security policies: a retrospective. In: WNSP: new security paradigms workshop. ACM Press, New York
24. Kiczales G, Lamping J, Mendhekar A, Maeda C, Lopes C, Loingtier JM, Irwin J (1997) Aspect-oriented programming. Springer, Berlin
25. Falcone Y, Fernandez JC, Mounier L (2009) Enforcement monitoring wrt the safety-progress classification of properties. In: SAC'09: proceedings of the 2009 ACM symposium on applied computing. ACM, New York, pp 593-600
26. The Apache Jakarta Project: Byte Code Engineering Library (2008) http://jakarta.apache.org/bcel/
27. Nethercote N, Seward J (2007) Valgrind: a framework for heavyweight dynamic binary instrumentation. ACM SIGPLAN Not 42:89-100 (Pubitemid 47630678)