A performance-oriented monitoring system for security properties in cloud computing applications

Computer Journal

Volumn 55, Issue 8, 2012, Pages 979-994

  Muñoz, Antonio ^a   Gonzalez, Javier ^a   Maña, Antonio ^a  

^a UNIVERSITY OF MÁLAGA   (Spain)

Author keywords

cloud computing; dynamic verification; event sequence language; monitoring rules; security properties

Indexed keywords

COMPUTING APPLICATIONS; DYNAMIC SECURITY MONITORING; DYNAMIC VERIFICATIONS; EVENT-SEQUENCE LANGUAGE; MONITORING ENGINES; MONITORING SYSTEM; SECURITY MEASURE; SECURITY PROPERTIES;

COMPUTER SCIENCE;

CLOUD COMPUTING;

EID: 84864644859     PISSN: 00104620     EISSN: 14602067     Source Type: Journal    
DOI: 10.1093/comjnl/bxs042     Document Type: Conference Paper

References (53)

1. Barringer, H., Goldberg, A., Havelund, K. and Sen, K. (2004) Rule-Based Runtime Verification. 5th Int. Conf. on Verification, Model Checking and Abstract Interpretation, LNCS 2937, Springer, pp. 44-57. (Pubitemid 38131366)
2. d'Amorim, M. and Havelund, K. (2005) Event-based Runtime Verification of Java Programs. Proc. 3rd Int. Workshop on Dynamic Analysis, St. Louis, MO. pp. 1-7. ACM Press, NY.
3. Havelund, K. and Rosu, G. (2004) An overview of the runtime verification tool Java PathExplorer. Methods in System Design, 24, 189-215.
4. Spanoudakis, G. and Mahub, K. (2006) Non-intrusive monitoring of service based systems. Int. J. Coop. Inf. Syst., 15, 325-358. (Pubitemid 44221751)
5. Kiczales, G. and Lampig, J. (1997) Aspect-Oriented Programming. In Aksit, M. and Matsuika, S. (eds) Lecture Notes in Computer Science 1241, pp. 220-242. Xerox Palo Alto Research Center. (Pubitemid 127083932)
6. Chen, F. and Rosu. (2003) Towards Monitoring-Oriented Programming: A Paradigm Combining Specification and Implementation. Electronic Notes in Theoretical Computer Science 89, No. 2, Elsevier.
7. Artho, C., Schuppan, V., Biere, A., Eugster, P., Baur, M. and Zweimuller, B. (2004) JNuke: Efficient Dynamic Analysis for Java. Proc. 16th Int. Conf. Computer Aided Verification, Boston, MA. LNCS 3114, pp. 462-465. Springer-Verlag.
8. Pnueli. A. (1977) The Temporal Logic of Programs. Proc. 18th IEEE Symp. Foundations of Computer Science, Los Alamitos, CA. pp. 46-77. IEEE Computer Society.
9. Drusinsky, D. (2000) The Temporal Rover and theATG Rover. In Havelund, K., Penix, J. andVisser,W. (eds) SPIN Model Checking and Software Verification, LNCS 1885, pp. 323-330. Springer.
10. Chang, E., Pnueli, A. and Manna, Z. (1994) Compositional Verification of Real-Time Systems. Proc. 9th IEEE Symp. Logic in Computer Science, Paris (France). pp. 458-465. IEEE Computer Society Press.
11. Sen, K. and Rosu, G. (2003) Generating Optimal Monitors for Extended Regular Expressions. Proc. 3rd Int. Workshop on Runtim Verification, Boulder, CO, USA. pp. 162-181. Elsevier Science.
12. Havelund, K. and Rosu, G. (2001) Monitoring Java Programs with Java PathExplorer. 1st Int. Workshop on Runtime Verification, Paris (France). pp. 97-114. Elsevier Science.
13. Havelund, K. and Rosu, G. (2001). Monitoring Programs using Rewriting. Proc. Int. Conf. on Automated Software Engineering (ASE'01), San Diego, USA. pp. 135-143. Institute of Electrical and Electronics Engineers. Institue of Electrical and Electronics Engineers.
14. Havelund, K. and Rosu, G. (2002) Synthesizing Monitors for Safety Properties. Tools and Algorithm for Construction and Analysis of Systems, Grenoble (France). LNCS 2280. Springer-Verlag.
15. Clavel, M., Durán, F.J., Eker, S., Lincoln Martí-Oliet, N., Meseguer, J. and Quesada, K.F. (1999) The Maude System. Proc. 10th Int. Conf. on Rewriting Techniques. Int. Conf. on Parallel and Distributed Processing Techniques and Applications, Las Vegas (USA).
16. Giannakopoulou, D. and Havelund, K. (2001) Automata-Based Verification of Temporal Properties on Running Programs. Proc. Int. Conf. on Automated Software Engineering, Coronado Island, CA. pp. 412-416. ENTCS. IEEE Computer Society.
17. Lee, I., Kannan, S., Kim, M., Sokolsky, O. and Viswanathan, M. (1999) RuntimeAssurance Based on Formal Specifications. Proc. Int. Conf. on Parallel and Distributed Processing Techniques and Applications. Las Vegas (USA).
18. Kim, M., Kannan, S., Lee, I., Sokolsky, O. and Viswanathan, M. (2001) Java-mac: A Runtime Assurance Tool for for Java Programs. Electronic Notes in Theoretical Computer Science, Vol. 55. Elsevier Science Publishers.
19. Mahub, K. and Spanoudakis, G. (2004) A Framework for Requirements Monitoring of Service Based Systems. Proc. 2nd Int. Conf. on Service Oriented Computing, New York (USA).
20. Shanahan, M. (1999) The Event Calculus Explained. Artificial Intelligence Today, LNAI 1600, pp. 409-430. Springer-Verlag.
21. Barnett, M. and Schulte, W. (2001) Spying on Components: A Runtime Verification Technique. Workshop on Specification and Verification of Component Based Systems, Tampa (USA).
22. Robinson. W. (2002) Monitoring Software Requirements using Instrumented Code. Proc. Hawaii Int. Conf. on Systems Sciences, Big Island (Hawaii).
23. Dardenne, A., van Lamsweerde, A. and Fickas, S. (1993) Goaldirected requirements acquisition. Sci. Comput. Program., 20, pp. 3-50.
24. Feather, M.S., Fickas, S., van Lamsweerde, A. and Ponsard, C. (1998) Reconciling System Requirements and Runtime Behaviour. Proc. 9th Int. Work. on Software Specification & Design, Mie (Japan).
25. Bouyer, P., Chevalier, F. and D'Souza, D. (2005) Fault Diagnosis using Timed Automata. Proc. 8th Int. Conf. on Foundations of Software Science and Computations Structures, Edinburg (UK). LNCS 3441, pp. 219-233. Springer. (Pubitemid 41273709)
26. Grastien, A., Cordier, M. and Largouët, C. (2005) Incremental Diagnosis of Discrete-Event Systems. On Principles of Diagnosis (DX05).
27. Pencolé, Y. and Cordier, M. (2005) A formal framework for the decentralised diagnosis of large scale discrete event systems & its application to telecommunication networks. Artif. Intell., 164, 121-180.
28. Sampath, M., Sengupta, R., Lafortune, S., Sinnamohideen, K. and Teneketzis, D.C. (1996) Failure Diagnosis using Dicrete-Event Models. IEEE Trans. Control Syst. Technol., 4, 105-124. (Pubitemid 126782836)
29. Tripakis, S. (2002) Fault Diagnosis for Timed Automata. Proc. 7th Int. Symp. Formal Techniques in Real-Time and Fault Tolerant Systems, Oldenburg (Germany). LNCS 2469, pp. 205-224. Springer.
30. Alur, R., Fix, L. and Henziger, T.A. (1994) A Determinizable Class of Timed Automata. Proc. 6th Conf. on Computer Aided Verification, Stanford (USA). LNCS 818, pp. 1-13. Springer.
31. Naldurg, P., Sen, K. and Thati, P. (2004)ATemporal Logic Based Framework to Intrusion Detection. Proc. Int. Conf. on Formal Techniques for Networked and Distributed Systems, Madrid (Spain).
32. Lazarevic, A., Kumar, V. and Srivastava, J. (2005) Intrusion Detection: A Survey. Managing Cyber-Threats: Issues Approaches & challenges. Springer.
33. Ko, C., Ruschitzka, M. and Levitt, K. (1997) Execution Monitoring of Security-Critical Programs in Distributed Systems: A Specification-Based Approach. IEEE Symp. on Security and Privacy, Oakland (USA). pp. 175-187. IEEE Society Press.
34. Schneider, F.B. (1998) Enforceable Security Policies. Cornell University Technical Report TR98-1664.
35. Alpern, B. and Schneider, F.B. (1987) Recognizing safety and liveness. Distrib. Comput., 2, 117-126.
36. Ligatti, J., Bauer, L. and Walker, D. (2005) Edit Automata: enforcement mechanisms for run-time security policies. Int. J. Inf. Secur., 4, 2-16. (Pubitemid 40347198)
37. Bandara, A.K., Lupu, E.C. and Russo, A. (2003) Using Event Calculus to Formalise Policy Specification and Analysis. Proc. Policies for Distributed Systems and Networks, POLICY, Lake Como (Italy). pp. 26-39. IEEE Computer Society.
38. Russo, A., Miller, A., Nuseibeh, B., and Kramer, J. (2002) An Abductive Approach for Analysing Event-Based Requirements Specifications. Presented at 18th Int. Conf. on Logic Programming, Copenhaguen (Denmark).
39. Janicke, H., Siewe, K., Jones, F., Cau, A. and Zedan, H. (2005) Analysis and Run-timeVerification of Dynamic Security Policies. Workshop on Defense Applications of Multi-Agent Systems, Utrecht (The Netherlands).
40. Moszkowski, B. (1996) The programming language Tempura. J. Symb. Comput., 22, 730-733.
41. Brisset, P. (2000) A Case Study in Java Software Verification. Appeared inWorkshop on Security, Middleware, and Languages, Stockholm.
42. Sekar, R., Venkatakrishnan, V.N., Basu, S., Bhatkar, S. and Du Varney, D. (2003) Model-Carrying Code: A Practical Approach for Safe Execution of Untrusted Applications. ACM Symp. Operating Systems Principles, Bolton Landing (USA).
43. Damianou, N., Dulay, N., Lupu, E.C. and Sloman, M.S. (2001) The Ponder Policy Specification Language. Presented at Policy, in Workshop on Policies for Distributed Systems and Networks, Bristol (UK).
44. Capra, L., Emmerich, W. and Mascolo, C. (2001) Reflective Middleware Solutions for Context-Aware Applications. In Yonezawa,A. and Matsuoka, S. (eds) Proc. Reflection.The 3rd Int. Conf. on Meta-level Architectures and Separation of Crosscutting Concerns, Kyoto (Japan). LNCS 2192. Springer.
45. Capra, L., Emmerich, W. and Mascolo, C. (2003) CARISMA: context aware reflective middleware system for mobile applications. IEEE Trans. Softw. Eng., 29, 929-945.
46. Mascolo, C., Capra, L., Zachariadis, S. and Emmerich,W. (2002) XMIDDLE:A Data-Sharing Middleware for Mobile Computing. Int. J. Wirel. Pers. Commun., 21, pp. 77-103. Kluwer Academic Publisher. (Pubitemid 34630509)
47. Brörkens, M. and Möller, M. (2002) Jassda Trace Assertions, Runtime Checking the Dynamic of Java Programs. In Schieferdecker, I., König, H. and Wolisz, A. (eds) Trends in Testing Communicating Systems, pp. 39-48. Berlin, Germany.
48. Emmerich, W. (2000) Software Engineering and Middleware. A Roadmap. The Future of Software Engineering-22nd Int. Conf. on Software Engineering, Limerick (Ireland). pp. 117-129. ACM Press.
49. Goldberg, A. and Havelund, K. (2003) Instrumentation of Java Bytecode for Runtime Analysis. Formal Techniques for Java-like Programs.Technical Reports from ETH Zurich 408. ETH Zurich, Switzerland.
50. Cohen, G., Chase, J. and Kaminsky, D. (1998). Automatic Program Transformation with JOIE. Proc. USENIX Annual Technical Symp, New Orleans (USA).
51. Necula, G. and Lee, P. (1996) Proof-Carrying Code. Technical Report CMU-CS-96-165. Carnegie Mellon University, Noviembre.
52. Necula, G. and Lee P. (1988) The Design and Implementation of a Certifying Compiler. Proc. 1988 ACM SIGPLAN Conf. on Programming Language Design and Impl, Atlanta (USA).
53. Meyer, B. (2000) Object-Oriented Software Construction (2nd edn). Prentice Hall, Upper Saddle River, NJ.