Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Reports (Research Report) Year : 2010

Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version

Clément Hurlin
  • Function : Author
  • PersonId : 874580
Helene Kirchner

Abstract

We present a specification approach of secured systems as transition systems and security policies as constraints that guard the transitions. In this context, security properties are expressed as invariants. Then we propose an abduction algorithm to generate possible security policies for a given transition-based system. Because abduction is guided by invariants, the generated security policies enforce security properties specified by these invariants. In this framework we are able to tune abduction in two ways in order to: (i) filter out bad security policies and (ii) generate additional possible security policies. Invariant-guided abduction helps designing policies and thus allows using formal methods much earlier in the process of building secured systems. This approach is illustrated on role-based access control systems.
Fichier principal
Vignette du fichier
FAST-fullversion.pdf (334.1 Ko) Télécharger le fichier
Origin : Files produced by the author(s)
Loading...

Dates and versions

inria-00507754 , version 1 (30-07-2010)

Identifiers

  • HAL Id : inria-00507754 , version 1

Cite

Clément Hurlin, Helene Kirchner. Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version. [Research Report] 2010, pp.19. ⟨inria-00507754⟩
42 View
59 Download

Share

Gmail Facebook X LinkedIn More