Run-Time Checking of Dynamic Properties

Sokolsky, Oleg; Sammapun, Usa; Lee, Insup; Kim, Jesung

doi:10.1016/j.entcs.2006.02.006

Cited by 21 publications

(16 citation statements)

References 10 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…First, LTL can be encoded in our logic easily [22]. Second, we allow expressive quantification in our logic, whereas prior work is either limited to propositional logic [5,44,47], or, when quantifiers are considered, they are severely restricted [7,45,46]. A recent exception to such syntactic restrictions is the work of Basin et al [12], to which we compare in detail below.…”

Section: Related Workmentioning

confidence: 99%

“…Runtime Monitoring with Temporal Logic A lot of prior work addresses the problem of runtime monitoring of policies expressed in Linear Temporal Logic (LTL) [5,7,12,44,46,47] and its extensions [7,45,46]. Although similar in the spirit of enforcing policies, the intended deployment of our work is different: We assume that system logs are accumulated independently and given to our algorithm, whereas an integral component of runtime monitoring is accumulation of system logs on the fly.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Understanding and Protecting Privacy: Formal Semantics and Principled Audit Mechanisms

Datta

Blocki

Christin

et al. 2011

Information Systems Security

View full text Add to dashboard Cite

Abstract. Privacy has become a significant concern in modern society as personal information about individuals is increasingly collected, used, and shared, often using digital technologies, by a wide range of organizations. Certain information handling practices of organizations that monitor individuals' activities on the Web, data aggregation companies that compile massive databases of personal information, cell phone companies that collect and use location data about individuals, online social networks and search engines-while enabling useful services-have aroused much indignation and protest in the name of privacy. Similarly, as healthcare organizations are embracing electronic health record systems and patient portals to enable patients, employees, and business affiliates more efficient access to personal health information, there is trepidation that the privacy of patients may not be adequately protected if information handling practices are not carefully designed and enforced. Given this state of affairs, it is very important to arrive at a general understanding of (a) why certain information handling practices arouse moral indignation, what practices or policies are appropriate in a given setting, and (b) how to represent and enforce such policies using information processing systems. This article summarizes progress on a research program driven by goal (b). We describe a semantic model and logic of privacy that formalizes privacy as a right to appropriate flows of personal information-a position taken by contextual integrity, a philosphical theory of privacy for answering questions of the form identified in (a). The logic is designed with the goal of enabling specification and enforcement of practical privacy policies. It has been used to develop the first complete formalization of two US privacy laws-the HIPAA Privacy Rule that prescribes and proscribes flows of personal health information, and the Gramm-Leach-Bliley Act that similarly governs flows of personal financial information. Observing that preventive access control mechanisms are not sufficient to enforce such privacy policies, we develop two complementary audit mechanisms for policy enforcement. These mechanisms enable auditing of practical privacy policies, including the entire HIPAA Privacy Rule. The article concludes with a vision for further research in this area.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Understanding and Protecting Privacy: Formal Semantics and Principled Audit Mechanisms

Datta

Blocki

Christin

et al. 2011

Information Systems Security

View full text Add to dashboard Cite

show abstract

“…We present MEDL syntax and semantics using examples. For the formal presentation, we refer the reader to [10,23].…”

Section: Runtime Monitoring and Checkingmentioning

confidence: 99%

“…The language MEDL is built around a twosorted logic that describes events and conditions. In this paper, we use a parametric variant of MEDL described in [23], but without explicit quantification. We present MEDL syntax and semantics using examples.…”

Section: Runtime Monitoring and Checkingmentioning

confidence: 99%

DMaC: Distributed Monitoring and Checking

Zhou

Sokolsky

Loo

et al. 2009

Runtime Verification

Self Cite

View full text Add to dashboard Cite

Abstract. We consider monitoring and checking formally specified properties in a network. We are addressing the problem of deploying the checkers on different network nodes that provide correct and efficient checking. We present the DMaC system that builds upon two bodies of work: the Monitoring and Checking (MaC) framework, which provides means to monitor and check running systems against formally specified requirements, and declarative networking, a declarative domain-specific approach for specifying and implementing distributed network protocols. DMaC uses a declarative networking system for both specifying network protocols and performing checker execution. High-level properties are automatically translated from safety property specifications in the MaC framework into declarative networking queries and integrated into the rest of the network for monitoring the safety properties. We evaluate the flexibility and efficiency of DMaC using simple but realistic network protocols and their properties.

show abstract

“…It seems useful here to adapt results on hazard analysis and safety assessment from the safety engineering domain (e.g., [18]) for the modeling and interface analysis. Further, as it may not be feasible to identify all interactions statically, it would be interesting to incorporate the idea of run-time monitoring and recovery [40] to enable automatic refinements of the interfaces and component interactions during run time.…”

Section: Beyond Resource-aware Interfacesmentioning

confidence: 99%