Integrating Information Flow Analysis in Unifying Theories of Programming

This paper presents a formal approach for modelling and reasoning about information flow control in software systems under Hoare and He's Unifying Theories of Programming (UTP). We investigate the problem of integrating information flow control into system design in a unified semantic setting....

Celý popis

Uložené v:
Podrobná bibliografia
Vydané v:Proceedings (IEEE Pacific Rim International Symposium on Dependable Computing) s. 67 - 76
Hlavní autori: Mu, Chunyan, Li, Guoqiang
Médium: Konferenčný príspevok..
Jazyk:English
Vydavateľské údaje: IEEE 01.12.2021
Predmet:
Cognition
Control systems
formal method
information flow
language-based security
Probabilistic logic
Programming
refinement
Semantics
Software systems
Specification languages
UTP
ISSN:2473-3105
On-line prístup:Získať plný text
Tagy: Pridať tag
Žiadne tagy, Buďte prvý, kto otaguje tento záznam!
Popis
Shrnutí:This paper presents a formal approach for modelling and reasoning about information flow control in software systems under Hoare and He's Unifying Theories of Programming (UTP). We investigate the problem of integrating information flow control into system design in a unified semantic setting. Our approach can therefore treat information flow analysis and control in various families of specification languages and programming paradigms in a more general way. In addition, we formalise the link between classes of predicates as a paired function which maps set of the predicates from one class into set of the predicates from the other with a concern of flow security preservation. The proposed flow-sensitive combined theories of multiple level classes of predicates can be applied to ensure flow security in different paradigms under stepwise development.
ISSN:2473-3105
DOI:10.1109/PRDC53464.2021.00018