Enforcing private policy via security-by-Contract - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Preprints, Working Papers, ... Year : 2010

Enforcing private policy via security-by-Contract

Gabriele Costa
  • Function : Author
  • PersonId : 867403
Ilaria Matteucci
  • Function : Author
  • PersonId : 867408


This work aims to investigate how the Security-by-Contract (SxC) paradigm, developed for providing security assurances to mobile applications, can be used for guaranteeing the security of communicating systems composed by several, heterogeneous components. These components need to communicate with each other by establishing direct, point to point connections. Direct connections can involve components sharing no common communication protocols and need a suitable interface. Enablers are in charge of providing these communication interfaces. Each component has a local security policy composed by a public and a private part. When a communication between two components has to be established, each component asks the enabler for providing a communication interface that respects its public policy. We exploit the Security-by-Contract approach for assuring that the application implementing the communication interface is always safe, i.e., it satisfies the security policies setted by components. Moreover, we present an extension of the Security-by-Contract for dealing with trust. Trust management is useful when one of the involved actors is considered to be potentially untrusted and the others want to measure its trust level.
Fichier principal
Vignette du fichier
IPM-Connect.pdf (235.51 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

inria-00458882 , version 1 (22-02-2010)


  • HAL Id : inria-00458882 , version 1


Gabriele Costa, Ilaria Matteucci. Enforcing private policy via security-by-Contract. 2010. ⟨inria-00458882⟩


65 View
65 Download


Gmail Facebook X LinkedIn More