Authors:
Mahjoub Langar
1
;
Mohamed Mejri
1
and
Kamel Adi
2
Affiliations:
1
Laval University, Canada
;
2
University of Quebec in Outaouais, Canada
Keyword(s):
Language based security, Runtime verification, Concurrent systems, Process algebra, Formal verification.
Related
Ontology
Subjects/Areas/Topics:
Information and Systems Security
;
Secure Software Development Methodologies
;
Security Engineering
;
Security in Distributed Systems
;
Security in Information Systems
;
Security Verification and Validation
Abstract:
Program security enforcement is designed to ensure that a program respects a given security policy, which generally specifies the acceptable executions of that. In general, the enforcement is achieved by adding some controls (tests) inside the target program or process. The major drawback of existing techniques is either their lack of precision or their inefficiency, especially those dedicated for concurrent languages. This paper proposes an efficient algebraic and fully automatic approach for security program enforcement: given a concurrent program P and a security policy f, it automatically generates another program P′ that satisfies f and behaves like P, except that it stops when P tries to violate the security policy f.