Petri Net Security Checker: Structural Non-interference at Work

Abstract

Abstract. Structural non-interference is a semi-static technique defined over Petri nets to check the absence of illegal information flows. This paper presents the main algorithmic features of this new technique and its implementation in a software tool, called the Petri Net Security Checker.

Sequence Composition Analysis of Noninterference in Cyber-Physical System with Petri Net

“…As a formal tool with rigorous semantics, Petri net can be efficiently used to model and verify the security properties of system models [4][5][6][7].…”

“…One better approach to information flow security is to control both the direct and indirect information flow by applying some information flow rules [6], which are called information flow security models, such as noninterference security model discussed in this paper.…”

“…Noninterference model was first proposed by Meseguer and Goguen [3][4] and a lot of works about this model were done [5][6][7][8][9][10][11]. However, there is little research about the sequence composition of noninterference in cyber-physical systems.…”

Strong non-leak guarantees for workflow models

“…The use of Petri nets has three advantages: first, it provides a uniform, language-independent model for analysis [21]; second, it allows the formalization of structural IF properties as Petri net patterns [8] (see §3); and third, it provides a sound basis for the formal IF analysis, which boils down to determining whether a Petri net encompasses a harmful pattern [15]. In particular, both the transformation of processes into Petri nets and the IF analysis are largely automated, thereby accelerating the certification process considerably.…”

Forensic Leak Detection for Business Process Models

“…Second, it allows the well-founded formalization of structural isolation properties as Petri net patterns [7]. Third, it provides a sound basis for efficient isolation analysis, which reduces to determining whether or not a Petri net encompasses a leak pattern [11]. Moreover, the graphical notation and similarity with business process specifications renders the approach practical for enterprise forensics.…”