Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Rapport (Rapport De Recherche) Année : 2010

Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version

Clément Hurlin
  • Fonction : Auteur
  • PersonId : 874580
Helene Kirchner

Résumé

We present a specification approach of secured systems as transition systems and security policies as constraints that guard the transitions. In this context, security properties are expressed as invariants. Then we propose an abduction algorithm to generate possible security policies for a given transition-based system. Because abduction is guided by invariants, the generated security policies enforce security properties specified by these invariants. In this framework we are able to tune abduction in two ways in order to: (i) filter out bad security policies and (ii) generate additional possible security policies. Invariant-guided abduction helps designing policies and thus allows using formal methods much earlier in the process of building secured systems. This approach is illustrated on role-based access control systems.
Fichier principal
Vignette du fichier
FAST-fullversion.pdf (334.1 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00507754 , version 1 (30-07-2010)

Identifiants

  • HAL Id : inria-00507754 , version 1

Citer

Clément Hurlin, Helene Kirchner. Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version. [Research Report] 2010, pp.19. ⟨inria-00507754⟩
43 Consultations
61 Téléchargements

Partager

Gmail Facebook X LinkedIn More