Model-driven Information Flow Security for Component-Based Systems

Najah Ben Said (1) , Takoua Abdellatif (1) , Saddek Bensalem (1) , Marius Bozga (1)

1 VERIMAG - IMAG - VERIMAG

This paper proposes a formal framework for studying information flow security in component-based systems. The security policy is defined and verified from the early steps of the system design. Two kinds of non-interference properties are formally introduced and for both of them, sufficient conditions that ensures and simplifies the automated verification are proposed. The verification is compositional, first locally, by checking the behavior of every atomic component and then globally, by checking the inter-components communication and coordination. The potential benefits are illustrated on a concrete case study about constructing secure heterogeneous distributed systems.

Mots clés: component-based systems; information flow security; non-interference; unwinding conditions; automated verification

Domaines: Systèmes embarqués

Najah Ben Said, Takoua Abdellatif, Saddek Bensalem, Marius Bozga. Model-driven Information Flow Security for Component-Based Systems. From Programs to Systems. The Systems perspective in Computing - ETAPS Workshop, FPS 2014, in Honor of Joseph Sifakis, Apr 2014, Grenoble, France. pp.1--20, ⟨10.1007/978-3-642-54848-2_1⟩. ⟨hal-01212303⟩