A Language For Secure Requirement Description Based on Information Flow

摘要：

The verification of policy configuration is the key point during the security analysis of SELinux. Most of cur rent verification methods focus on the construction of policy configurations mathematical model, rather than the difficulty of security requirements description for the verifiers. A new security requirement description language (SRDL) based on the theory of information flow is proposed, whose syntax is irrelevant with the verification tools logic systems. Without knowing the math ematical logic behind those verification tools, every requirement can be represented as one or more information flows with SRDL by the verifier. The complier of SRDL could translate these flows into verification tools input automatically. Such a SRDL complier is implemented for the analysis of SELinux. It can translate SRDLs flows into the input model of NuSMV, a wildly used model checker.

作者: Liang Cheng Yang Zhang Dengguo Feng

作者单位: State Key Laboratory of Information Security,Institute of Software, Chinese Academy of Sciences,Beijing 100190

会议类型: 国际会议

会议名称: 2010 IEEE International Conference on Intelligent Computing and Intelligent Systems(2010 IEEE 智能计算与智能系统国际会议 ICIS 2010)

会议地点: 厦门

会议语种:英文

页码: 397-401

在线出版日期: 2010-10-29（万方平台首次上网日期，不代表论文的发表时间）