Authors:
Florian Lugou
;
Letitia W. Li
;
Ludovic Apvrille
and
Rabéa Ameur-Boulifa
Affiliation:
LTCI, CNRS, Télécom ParisTech and Université Paris-Saclay, France
Keyword(s):
SysML-Sec, Security, Model-driven Engineering, Model Transformation, ProVerif, TTool.
Related
Ontology
Subjects/Areas/Topics:
Applications and Software Development
;
Languages, Tools and Architectures
;
Methodologies, Processes and Platforms
;
Model Transformation
;
Model Transformations and Generative Approaches
;
Model-Based Testing and Validation
;
Model-Driven Software Development
;
Models
;
Paradigm Trends
;
Software Engineering
;
Syntax and Semantics of Modeling Languages
;
Systems Engineering
Abstract:
The security flaws of embedded systems have become very valuable targets for cyber criminals. SysML-Sec has been introduced to target the security of these systems during their development stages. However, assessing resistance to attacks during these stages requires efficiently capturing the system’s behavior and formally proving security properties from those behaviors. This paper thus proposes (i) novel SysML block and state machine diagrams enhanced to better capture security features, and (ii) a model-to-Proverif transformation. ProVerif is a toolkit first released for the formal analysis of security protocol, but it can be used more generally to assess confidentiality and authenticity properties. This paper demonstrates the soundness of our approach using a complex asymmetric key distribution protocol.