Enforcement and Validation (at runtime) of Various Notions of Opacity

Yliès Falcone (1) , Hervé Marchand (2)

1 CORSE - Compiler Optimization and Run-time Systems
2 SUMO - SUpervision of large MOdular and distributed systems

We are interested in the validation of opacity. Opacity models the impossibility for an attacker to retrieve the value of a secret in a system of interest. Roughly speaking, ensuring opacity provides confidentiality of a secret on the system that must not leak to an attacker. More specically, we study how we can model-check, verify and enforce at system runtime, several levels of opacity. Besides existing notions of opacity, we also introduce K-step strong opacity, a more practical notion of opacity that provides a stronger level of confidentiality.

Domaines: Génie logiciel [cs.SE]

Yliès Falcone, Hervé Marchand. Enforcement and Validation (at runtime) of Various Notions of Opacity. Discrete Event Dynamic Systems, 2015, 25 (4), pp.531-570. ⟨10.1007/s10626-014-0196-4⟩. ⟨hal-00987985⟩