Evaluating system integrity

Foley, Simon N.

doi:10.1145/310889.310909

Cited by 8 publications

(2 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In the following we show by using examples from [12,13], how functional requirements can be expressed as requirements in terms of constraints on variables that are invariant over the lifetime of the system. Example 3 A simple enterprise receives shipments, and generates associated payments for a supplier.…”

Section: Analyzing Integrity Policiesmentioning

confidence: 99%

See 1 more Smart Citation

Soft Constraints for Security

Bella

Bistarelli

Foley

2006

Electronic Notes in Theoretical Computer Science

Self Cite

View full text Add to dashboard Cite

Integrity policies and cryptographic protocols have much in common. They allow for a number of participating principals, and consist of sets of rules controlling the actions that principals should or should not perform. They are intended to uphold various security properties, the crucial ones being integrity, confidentiality and authentication. This paper takes a unified view to the analysis of integrity policies and cryptographic protocols: they are artifacts that must be designed to be sufficiently robust to attack given an understood threat model. For example, integrity policy rules provide resilience to the threat of internal fraud, while cryptographic protocols provide resilience to the threat of replay and related attacks. The framework is modelled using (soft) constraints and analysis corresponds to the soft constraint satisfaction problem. Soft constraints facilitate a quantitative approach to analyzing integrity, confidentiality and authentication. Examples will be given: an integrity policy may achieve different levels of integrity under different circumstances; a protocol message may enjoy different levels of confidentiality for different principals; a principal can achieve different levels of authentication with different principals.

show abstract

Section: Analyzing Integrity Policiesmentioning

confidence: 99%

“…Dependability is characterized as a "property of a computer system such that reliance can be justifiably placed on the service it delivers" [15]. In [12,13] this notion of dependability may be viewed as a class of refinement whereby the nature of the reliability of the enterprise is explicitly specified.…”

Section: Examplementioning

confidence: 99%