Non-interference with What-Declassification in Component-Based Systems

Abstract

Abstract-Component-based design is a method for modular design of systems. The structure of component-based systems follows specific rules and single components make assumptions on the environment that they run in. In this paper, we provide a noninterference property for component-based systems that allows for a precise specification of what-declassification of information and takes assumptions on the environment into consideration in order to allow a modular, precise and re-usable information-flow analysis. For precise analysis, components can be analyzed by separately analysing services provided by a component, and from our compositionality theorem non-interference of components follows.

CoCon: A Conference Management System with Formally Verified Document Confidentiality

“…We believe the future of information flow security verification will see an increased cooperation between fully automatic tools and proof assistants; the former being employed for wide-covering lightweight properties and the latter being employed more sparingly, for heavier properties of clearly isolated relatively small cores of systems. Compositionality results for information flow security [6,28,30,48,59] will play a key role in achieving such a cooperation on a well-understood semantic basis.…”

Enforcing globally dependent flow policies in message-passing systems

“…In [48], a security property and a security type system are developed for a concurrent language with asynchronous message-passing communication, with support for compositional reasoning under arbitrary environments of systems. In [19], compositional reasoning techniques are developed for the information-flow security of component-based systems where the components communicate via synchronous message-passing. The potential environments of each component is explicitly considered in secure composition.…”

Compositionality of Component Fault Trees

“…In the remainder of this work we take the formalization of components from Greiner and Grahl [1] and reuse their notation for better comparability of further results in this paper.…”