Non-interference in partial order models

Béatrice Bérard 1 Loïc Hélouët 2 John Mullins 3
1 MoVe - Modélisation et Vérification
LIP6 - Laboratoire d'Informatique de Paris 6
2 SUMO - SUpervision of large MOdular and distributed systems
Inria Rennes – Bretagne Atlantique , IRISA_D4 - LANGAGE ET GÉNIE LOGICIEL
Abstract : Non-interference (NI) is a property of systems stating that confidential actions should not cause effects observable by unauthorized users. Several variants of NI have been studied for many types of models, but rarely for true concurrency or unbounded models. This work investigates NI for High-level Message Sequence Charts (HMSC), a scenario language for the description of distributed systems, based on composition of partial orders. We first propose a general definition of security properties in terms of equivalence among observations of behaviors. Observations are naturally captured by partial order au-tomata, a formalism that generalizes HMSCs and permits to assemble partial orders. We show that equivalence or inclusion properties for HMSCs (hence for partial order automata) are undecidable, which means in particular that NI is undecidable for HMSCs. We hence consider decidable subclasses of partial order automata and HMSCs. Finally, we define weaker local properties, describing situations where a system is attacked by a single agent, and show that local NI is decidable. We then refine local NI to a finer notion of causal NI that emphasizes causal dependencies between confidential actions and observations , and extend it to causal NI with (selective) declassification of confidential events. Checking whether a system satisfies local and causal NI and their declassified variants are PSPACE-complete problems.
Document type :
Journal articles
Liste complète des métadonnées

Cited literature [20 references]  Display  Hide  Download

https://hal.inria.fr/hal-01379451
Contributor : Loic Helouet <>
Submitted on : Tuesday, October 11, 2016 - 3:18:24 PM
Last modification on : Thursday, March 21, 2019 - 1:12:15 PM
Document(s) archivé(s) le : Saturday, February 4, 2017 - 7:28:36 PM

File

bhm-TECS.pdf
Files produced by the author(s)

Identifiers

Citation

Béatrice Bérard, Loïc Hélouët, John Mullins. Non-interference in partial order models. ACM Transactions on Embedded Computing Systems (TECS), ACM, 2017, Application and Theory of Petri Nets and Other Models of Concurrency: Special Issue of Selected Papers from Petri Nets 2015, 16 (2), pp.44:1-44:34. ⟨http://tecs.acm.org/⟩. ⟨10.1145/2984639⟩. ⟨hal-01379451⟩

Share

Metrics

Record views

647

Files downloads

181