Synthesis of Non-Interferent Systems

Franck Cassez (1) , John Mullins (2) , Olivier Henri Roux (1)

1 IRCCyN - Institut de Recherche en Communications et en Cybernétique de Nantes
2 EPM - École Polytechnique de Montréal

In this paper, we focus on distributed systems sub ject to security issues. Such systems are usually composed of two entities: a high level user and a low level user that can both do some actions. The security properties we consider are non-interference properties. A system is non-interferent if the low level user cannot deduce any information by playing its low level actions. Various notions of non-interference have been defined in the literature, and in this paper we focus on two of them: one trace-based property (SNNI) and another bisimulation-based property (BSNNI). For these properties we study the problems of synthesis of a high level user so that the system is non-interferent. We prove that a most permissive high level user can be computed when one exists.

Domaines: Autre [cs.OH]

Franck Cassez, John Mullins, Olivier Henri Roux. Synthesis of Non-Interferent Systems. 4th Int. Conf. on Mathematical Methods, Models and Architectures for Computer Network Security (MMM-ACNS'07), Sep 2007, Saint Petersburg, Russia. pp.307--321. ⟨inria-00363029⟩