Application of Lightweight Formal Methods to Software Security

Gilliam, D.P.; Powell, J. David; Bishop, Matt

doi:10.1109/wetice.2005.19

Cited by 12 publications

(5 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Formal methods may prove to be a solution to the problem related to security requirement specification. 62,63 Therefore, attention toward the knowledge on security requirement specification by formal methods appears imminent. This approach includes identification, classification, and specification of security requirements, the objective of the proposed topic is to enable an SRSFM framework to specified security requirements and in turn, avoid the inception of security vulnerabilities.…”

Section: Rq 1 What Research Topics Are Being Addressed?mentioning

confidence: 99%

A review on security requirements specification by formal methods

Mishra

Mustafa

2021

Concurrency and Computation

View full text Add to dashboard Cite

Security is an afterthought process for the development of software in earlier days but now the time has been changed. Now, security is on top priority and involved from the beginning of software development. Security requirements are the prime concern for the development and quality of any software product. The specification and verification of security requirements need a lot of attention from the computer science community in the process of the software development life cycle. Formal Methods are a widely used and well-recognized approach for the specification and verification of any safety-critical system. Formal methods play an important role in the requirement phase to the design phase of software development. In this study, we summarized the outcomes of related papers to find out the current state of the art in the proposed area.In this manuscript, three research questions are frame and we try to find the answer to these research questions to the best of our effort and knowledge. The objective of this research paper is to find out the gap analysis, state of art, and trends in the proposed area. The academician needs to pursue more effort toward the formal specification of security requirements, providing a deeper understanding to help security experts in the development of systems.

show abstract

Section: Rq 1 What Research Topics Are Being Addressed?mentioning

confidence: 99%

A review on security requirements specification by formal methods

Mishra

Mustafa

2021

Concurrency and Computation

View full text Add to dashboard Cite

show abstract

“…The SDF model and hardware models are then transformed to priced time automata which are used as inputs to UPPAAL for verification of requirements and also to compute the energy-optimal schedule for given requirements. However, some of these solutions are 'heavy-weight' , as discussed in [59,60], and thus not suitable as part of an iterative development approach as is one of the important aspects of our work here.…”

Section: Related Workmentioning

confidence: 99%

Towards a Verification-Driven Iterative Development of Software for Safety-Critical Cyber-Physical Systems

Sirjani

Provenzano

Asadollah

et al. 2021

J Internet Serv Appl

View full text Add to dashboard Cite

Software systems are complicated, and the scientific and engineering methodologies for software development are relatively young. Cyber-physical systems are now in every corner of our lives, and we need robust methods for handling the ever-increasing complexity of their software systems. Model-Driven Development is a promising approach to tackle the complexity of systems through the concept of abstraction, enabling analysis at earlier phases of development. In this paper, we propose a model-driven approach with a focus on guaranteeing safety using formal verification. Cyber-physical systems are distributed, concurrent, asynchronous and event-based reactive systems with timing constraints. The actor-based textual modeling language, Rebeca, with model checking support is used for formal verification. Starting from structured requirements and system architecture design the behavioral models, including Rebeca models, are built. Properties of interest are also derived from the structured requirements, and then model checking is used to formally verify the properties. This process can be performed in iterations until satisfaction of desired properties are ensured, and possible ambiguities and inconsistencies in requirements are resolved. The formally verified models can then be used to develop the executable code. The Rebeca models include the details of the signals and messages that are passed at the network level including the timing, and this facilitates the generation of executable code. The natural mappings among the models for requirements, the formal models, and the executable code improve the effectiveness and efficiency of the approach.

show abstract

“…This can be mapped to partiality in analysis. Gilliam et al (2005) proposed a framework for system verification using Promela and the model checker SPIN, introduced by Holzmann ( 2004). They use a compositional approach that allows one to conduct proofs for a subset of the overall environment in a manner that those results can be extrapolated to the environment at large.…”

Section: Related Workmentioning

confidence: 99%

Towards Classification of Lightweight Formal Methods

Zamansky

Spichkova

Rodríguez-Navas

et al. 2018

Proceedings of the 13th International Conference on Evaluation of Novel Approaches to Software Engineering

View full text Add to dashboard Cite

The use of lightweight formal methods (LFM) for the development of industrial applications has become a major trend. Although the term "lightweight formal methods" has been used for over ten years now, there seems to be no common agreement on what "lightweight" actually means, and different communities apply the term in all kinds of ways. In this paper, we explore the recent trends in the use of LFM, and establish our opinion that cost-effectiveness is the driving force to deploy LFM. Further, we propose a simple framework that should help to classify different LFM approaches and to estimate which of them are most cost-effective for a certain software engineering project. We demonstrate our framework using some examples.

show abstract

Application of Lightweight Formal Methods to Software Security

Abstract: Abstract

Cited by 12 publications

References 13 publications

A review on security requirements specification by formal methods

A review on security requirements specification by formal methods

Towards a Verification-Driven Iterative Development of Software for Safety-Critical Cyber-Physical Systems

Towards Classification of Lightweight Formal Methods

Contact Info

Product

Resources

About