Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version

Abstract : We present a specification approach of secured systems as transition systems and security policies as constraints that guard the transitions. In this context, security properties are expressed as invariants. Then we propose an abduction algorithm to generate possible security policies for a given transition-based system. Because abduction is guided by invariants, the generated security policies enforce security properties specified by these invariants. In this framework we are able to tune abduction in two ways in order to: (i) filter out bad security policies and (ii) generate additional possible security policies. Invariant-guided abduction helps designing policies and thus allows using formal methods much earlier in the process of building secured systems. This approach is illustrated on role-based access control systems.
Type de document :
[Research Report] 2010, pp.19
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger
Contributeur : Helene Kirchner <>
Soumis le : vendredi 30 juillet 2010 - 19:21:22
Dernière modification le : vendredi 16 septembre 2016 - 15:07:31
Document(s) archivé(s) le : jeudi 4 novembre 2010 - 10:54:10


Fichiers produits par l'(les) auteur(s)


  • HAL Id : inria-00507754, version 1



Clément Hurlin, Helene Kirchner. Semi-Automatic Synthesis of Security Policies by Invariant-Guided Abduction - Full version. [Research Report] 2010, pp.19. 〈inria-00507754〉



Consultations de la notice


Téléchargements de fichiers