TY - GEN
T1 - Tracking dependent information flows
AU - Zhioua, Zeineb
AU - Roudier, Yves
AU - Ameur, Rabea Boulifa
AU - Kechiche, Takoua
AU - Short, Stuart
N1 - Publisher Copyright:
Copyright © 2017 by SCITEPRESS – Science and Technology Publications, Lda. All rights reserved.
PY - 2017/1/1
Y1 - 2017/1/1
N2 - Ensuring the compliance of developed software with security requirements is a challenging task due to imprecision on the security guidelines definition, and to the lack of automatic and formal means to lead this verification. In this paper, we present our approach that aims at integrating the formal specification and verification of security guidelines in early stages of the development life cycle by combining the model checking together with information flow analysis. We formally specify security guidelines that involve dependent information flows as a basis to lead formal verification through model checking, and provide precise feedback to the developer.
AB - Ensuring the compliance of developed software with security requirements is a challenging task due to imprecision on the security guidelines definition, and to the lack of automatic and formal means to lead this verification. In this paper, we present our approach that aims at integrating the formal specification and verification of security guidelines in early stages of the development life cycle by combining the model checking together with information flow analysis. We formally specify security guidelines that involve dependent information flows as a basis to lead formal verification through model checking, and provide precise feedback to the developer.
KW - Formal Specification
KW - Information Flow Analysis
KW - Labeled Transition System
KW - Model Checking
KW - Program Dependence Graph
KW - Security Guidelines
UR - https://www.scopus.com/pages/publications/85049173288
U2 - 10.5220/0006209301790189
DO - 10.5220/0006209301790189
M3 - Conference contribution
AN - SCOPUS:85049173288
T3 - ICISSP 2017 - Proceedings of the 3rd International Conference on Information Systems Security and Privacy
SP - 179
EP - 189
BT - ICISSP 2017 - Proceedings of the 3rd International Conference on Information Systems Security and Privacy
A2 - Mori, Paolo
A2 - Furnell, Steven
A2 - Camp, Olivier
PB - SciTePress
T2 - 3rd International Conference on Information Systems Security and Privacy, ICISSP 2017
Y2 - 19 February 2017 through 21 February 2017
ER -