A semiring-based trace semantics for processes with applications to information leakage analysis
A semiring-based trace semantics for processes with applications to information leakage analysis
复制标题
DOI:
10.1017/s0960129513000601
复制
发表时间:
2010-09
影响因子:
0.5
通讯作者:
Michele Boreale;D. Clark;D. Gorla
中科院分区:
文献类型:
--
作者:
Michele Boreale;D. Clark;D. Gorla
We propose a framework for reasoning about program security building on language-theoretic and coalgebraic concepts. The behaviour of a system is viewed as a mapping from traces of high (unobservable) events to low (observable) events: the less the degree of dependency of low events on high traces, the more secure the system. We take the abstract view that low events are drawn from a generic semiring, where they can be combined using product and sum operations; throughout the paper, we provide instances of this framework, obtained by concrete instantiations of the underlying semiring. We specify systems via a simple process calculus, whose semantics is given as the unique homomorphism from the calculus into the set of behaviours, i.e. formal power series, seen as a final coalgebra. We provide a compositional semantics for the calculus in terms of rational operators on formal power series and show that the final and the compositional semantics coincide. This compositional, syntax-driven framework lays a foundation for automation and abstraction of a quantified approach to flow security of system specifications.