Download PDF

Nordic Conference on Secure IT Systems, Date: 2013/10/18 - 2013/10/21, Location: Ilulissat, Greenland.

Publication date: 2013-10-01
Volume: 8208 Pages: 247 - 262
ISSN: 978-3-642-41487-9
Publisher: Springer Verlag

Proceedings of the 18th Nordic Conference on Secure IT Systems

Author:

Milushev, Dimiter
Clarke, Dave

Keywords:

hyperproperties, security policies, model checking, polyadic modal mu-calculus, games, Science & Technology, Technology, Computer Science, Software Engineering, Computer Science, Theory & Methods, Computer Science, SOLVING PARITY, ALGORITHM, AUTOMATA

Abstract:

Hyperproperties were proposed as an abstract formalization of security policies, but unfortunately they lack a generic verification methodology. In an attempt to remedy this, we introduced the notion of incremental hyperproperties (IHPs), motivated by the observation that they have a clearer and more feasible verification methodology. To show that verification is indeed feasible, a decidable IHP verification methodology via games is presented and evaluated. The main advantage of the approach is that the games in combination with winning strategy evidence give valuable intuition about the security of a system and are very helpful when analyzing systems w.r.t. policy specifications.