Reliable Security for Concurrent Programs

RSCP项目的总体目标是使并发程序的信息流安全的语义合理的认证。 并发系统概念上的复杂性使得获得可靠的安全保证变得尤为重要。 然而，在并发系统中的信息流的安全已被证明是不平凡的。 以前存在的信息流分析没有提供足够的并发特性覆盖，通常不太令人满意（wrt。精确性、充分性或效率）。 RSCP旨在缩小并发程序和顺序程序信息流分析成熟度之间的差距，为充分刻画非干扰类信息流特性的安全性，以及基于良基语义的并发程序安全性分析和证明提供了一个新的框架。 在第三个两年期阶段，重点将是在信息流安全方面取得进展。

The overall objective of the RSCP-project is to enable the semantically justified certification of information flow security for concurrent programs. The conceptual complexity of concurrent systems makes it particularly desirable to obtain reliable security guarantees. However, securing the information flow in concurrent systems has proven to be non-trivial. Previously existing information flow analyses did not provide sufficient coverage of concurrency features and were usually less satisfactory (wrt.\ precision, adequacy or efficiency) than their counterparts for sequential programs. RSCP aims at reducing this gap between the maturity of information flow analyses for concurrent programs and for sequential programs.RSCP will provide a novel framework for adequately characterising security aspects by noninterference-like information flow properties, as well as for analysing and certifying the security ofconcurrent programs based on well-founded semantics. In the third two-year phase, the focus shall be on making progress towards information flow security in-the-large.