检索结果-内蒙古大学图书馆

International Conference on Secure System Integration and Reliability Improvement, SSIRI

作者： Changzhi Zhao Wei Dong Martin Leucker Zhichang Qi Department of Computer Science National University of Defense Technology Changsha China Institute of Software Technology and Programming Languages University of Lübeck Germany

Access control is a vital security mechanism in today's operating systems, and the security policies dictating the security relevant behaviors is lengthy and complex, for example in Security-Enhanced Linux (SELinux). It is extremely difficult to verify the consistency between the security policies and the security goals desired by applications. In this paper, we present how to predict whether the information flow security goal is violated or not during runtime, how to generate the corresponding control actions on-line when divergence is detected and how to apply these actions in time based on software active monitoring technique. The symbolic security information flow model of SElinux is generated from a formalization of the access control mechanism which can be used to generate the N-step ahead projection of the future behavior. Information flow security goals are expressed in linear temporal logic (LTL) which provides clear description of the objectives desired by applications. Anticipatory monitor is generated from LTL formula automatically. We consider an on-line scheme where after the occurrence of an event, the next control action is determined on the basis of the N-step ahead projection of the future behavior. This procedure is repeated after the occurrence of next security relevant event. Thus, a closed-loop system is generated that all behavior sequences will satisfy the security goals.

关键词： Context Monitoring Semantics Access control Cost accounting Syntactics

来源：评论

学校读者我要写书评

暂无评论

Lecture Notes in computer science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics): Preface

Lecture Notes in Computer Science (including subseries Lectu...

引用

Lecture Notes in computer science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 2011年 6546 LNCS卷 VI页

作者： Page, Rex Horváth, Zoltán Zsók, Viktória University of Oklahoma School of Computer Science 110 West Boyd Street Norman OK 73019 United States Eötvös Loránd University Faculty of Informatics Department of Programming Languages and Compilers Pazmany Peter setany 1/C 1117 Budpest Hungary

来源：评论

学校读者我要写书评

暂无评论

Preface

Lecture Notes in Computer Science (including subseries Lectu...

引用

Lecture Notes in computer science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 2011年 6546 LNCS卷

作者： Page, Rex Horváth, Zoltán Zsók, Viktória University of Oklahoma School of Computer Science 110 West Boyd Street NormanOK73019 United States Eötvös Loránd University Faculty of Informatics Department of Programming Languages and Compilers Pázmány Péter sétány 1/C Budpest1117 Hungary

来源：评论

学校读者我要写书评

暂无评论

Engineering self-coordinating software intensive systems

Engineering self-coordinating software intensive systems

引用

FSE/SDP Workshop on the Future of Software Engineering Research, FoSER 2010

作者： Schäfer, Wilhelm Birattari, Mauro Blömer, Johannes Dorigo, Marco Engels, Gregor O'Grady, Rehan Platzner, Marco Rammig, Franz Reif, Wolfgang Trächtler, Ansgar Heinz Nixdorf Institute University of Paderborn Fürstenallee 11 Paderborn Germany Heinz Nixdorf Institute University of Paderborn Pohlweg 98 Paderborn Germany Heinz Nixdorf Institute University of Paderborn Warburger Str. 100 Paderborn Germany Department of Computer Science University of Paderborn Warburger Str. 100 Paderborn Germany Department of Control Engineering and Mechatronics University of Paderborn Pohlweg 98 Paderborn Germany IRIDIA CoDE Université Libre de Bruxelles Ave. F. Roosevelt 50 1050 Brussels Belgium Department of Software Engineering and Programming Languages University of Augsburg Universitätsstr. 6a Augsburg Germany

ISBN: (纸本)9781450304276

It my great pleasure and honor to welcome you to FoSER 2010: The FSE/SDP Workshop on the Future of Software Engineering Research. This workshop was organized in collaboration with and made possible by generous support from the Software Design and Productivity Coordinating Group (SDP) of the U.S. National Coordination Office (NCO) for Networking and Information Technology Research and Development (NITRD), and the National science Foundation (NSF). This one-time, international working conference has brought together top academic and industrial researchers and government research funding agency personnel from around the world to engage in an extended discussion of consequential new ideas about the future of our field. The ideas produced by this workshop will be disseminated in two forms. First, the position papers accepted by the program committee will be published in a companion to the Proceedings of FSE-18. Second, the workshop findings will be published subsequently in a special report by NITRD/SDP. The call for papers for FoSER 2010 solicited 4-page position papers with new ideas about the future of software and software-reliant systems, and the research that will be needed to meet future needs. Papers were expected to be creative and thought-provoking, and to articulate compelling new perspectives, positions, problem formulations, assumptions and approaches. The workshop did not seek, and did not accept, technical research papers or abstracts. The workshop received a total of 139 position papers. Of these, 90 papers (65%) were accepted. Each paper was reviewed by at least two members of the workshop program committee. The committee was asked to accept all papers presenting significant new ideas about how our field should move forward. Copyright 2010 ACM.

关键词： Software design

来源：评论

学校读者我要写书评

暂无评论

Generating formal specifications for security-critical applications - A model-driven approach

Generating formal specifications for security-critical appli...

引用

International Workshop on Software Engineering for Secure Systems (SESS)

作者： Nina Moebius Kurt Stenzel Wolfgang Reif Department of Software Engineering and Programming Languages Institute of Computer Science University of Augsburg Augsburg Germany

ISBN: (纸本)9781424437252

The SecureMDD approach aims to generate both, a formal specification for verification and executable code, from UML diagrams. The UML models define the static as well as dynamic components of the system under development. This model-driven approach is focused on security-critical applications that are based on cryptographic protocols, especially Java Card applications. In this paper we describe the generation of the formal specification from the UML model which is then used as input for our interactive verification system KIV. The formal specification is based on abstract state machines and algebraic specifications. It allows to formulate and to prove application-specific security properties.

关键词： Formal specifications Object oriented modeling Unified modeling language Cryptographic protocols Java Security Application software Software engineering computer languages computer science

来源：评论

学校读者我要写书评

暂无评论

A hybrid shared memory execution model for a data parallel language with I/O

A hybrid shared memory execution model for a data parallel l...

引用

作者： Grelck, Clemens Kuthe, Steffen Scholz, Sven-Bodo Institute of Software Technology and Programming Languages University of Lübeck Ratzeburger Allee 160 23538 Lübeck Germany Department of Computer Science University of Hertfordshire College Lane Hatfield AL10 9AB United Kingdom

We propose a novel execution model for the implicitly parallel execution of data parallel programs in the presence of general I/O operations. This model is called hybrid because it combines the advantages of the standard execution models fork/join and SPMD. Based on program analysis the hybrid model adapts itself to one or the other on the granularity of individual instructions. We outline compilation techniques that systematically derive the organization of parallel code from data flow characteristics aiming at the reduction of execution mode switches in general and synchronization/communication requirements in particular. Experiments based on a prototype implementation show the effectiveness of the hybrid execution model for reducing parallel overhead. © 2008 World Scientific Publishing Company.

关键词： Input output programs

来源：评论

学校读者我要写书评

暂无评论

A modeling framework for the development of provably secure E-commerce applications

A modeling framework for the development of provably secure ...

引用

2nd International Conference on Software Engineering Advances - ICSEA 2007

作者： Moebius, Nina Haneberg, Dominik Reif, Wolfgang Schellhorn, Gerhard Institute of Computer Science University Augsburg Department of Software Engineering and Programming Languages 86135 Augsburg Germany

ISBN: (纸本)0769529372

Developing security-critical applications is very difficult and the past has shown that many applications turned out to be erroneous after years of usage. For this reason it is desirable to have a sound methodology for developing security-critical E-Commerce applications. We present an approach to model these applications with the unified modeling language (UML) [1] extended by a UML profile to tailor our models to security applications. Our intent is to (semi-) automatically generate a formal specification suitable for verification as well as an implementation from the model. Therefore we offer a development method seamlessly integrating semi-formal and formal methods as well as the implementation. This is a significant advantage compared to other approaches not dealing with all aspects from abstract models down to code. Based on this approach we can prove security properties on the abstract protocol level as well as the correctness of the protocol implementation in Java with respect to the formal model using the refinement approach. In this paper we concentrate on the modeling with UML and some details regarding the transformation of this model into the formal specification. We illustrate our approach on an electronic payment system called Mondex [10]. Mondex has become famous for being the target of the first ITSEC evaluation of the highest level E6 which requires formal specification and verification. © 2007 IEEE.

关键词： Unified Modeling Language

来源：评论

学校读者我要写书评

暂无评论

On optimising shape-generic array programs using symbolic structural information

引用

18th International Symposium on Implementation and Application of Functional languages, IFL 2006

作者： Trojahner, Kai Grelck, Clemens Scholz, Sven-Bodo University of Lübeck Institute of Software Technology and Programming Languages University of Hertfordshire Department of Computer Science

ISBN: (纸本)9783540741299

Shape-generic programming and high run time performance do match if generic source code is systematically specialised into nongeneric executable code. However, as soon as we drop the assumption of whole-world knowledge or refrain from specialisation for other reasons, compiled generic code is substantially less efficient. Limited effectiveness of code optimisation techniques due to the inherent lack of knowledge about the structural properties of arrays can be identified as the single most important source of inefficiency. However, in many cases partial structural information or structural relationships between arrays would actually suffice for optimisation. We propose symbolic array attributes as a uniform scheme to infer and to represent partial and relational structural information in shape-generic array code. By reusing the regular language to express structural properties in intermediate code, existing optimisations benefit from symbolic array attributes with little or no alteration. In fact, program optimisation and identification of structural properties cross-fertilise each other. We outline our approach in the context of the functional array language SAC and demonstrate its effectiveness by a small case study. © Springer-Verlag Berlin Heidelberg 2007.

关键词： Information analysis

来源：评论

学校读者我要写书评

暂无评论

Many-valued logic, normal forms

Many-valued logic, normal forms

引用

10th Symposium on programming languages and Software Tools, SPLST 2007

作者： Varga, Katalin Pásztor Várterész, Magda Department of Programming Languages and Compilers Eötvös Loránd University Hungary Department of Computer Science University of Debrecen Hungary

ISBN: (纸本)9789634639251

Interpretation of the truth degrees. Suitable extension of the two-valued logical operations as conjunction, disjunction, implication, negation. Main directions (Post, Kleene, Lukasiewicz, Bochvar). Notion of assertability. Designated values. Functional completeness via two valued negation, conjunction, disjunction. Normal forms as tools in theorem proving.

关键词： Many valued logics

来源：评论

学校读者我要写书评

暂无评论

A Modeling Framework for the Development of Provably Secure E-Commerce Applications

A Modeling Framework for the Development of Provably Secure ...

引用

International Conference on Software Engineering Advances (ICSEA)

作者： Nina Moebius Dominik Haneberg Wolfgang Reif Gerhard Schellhorn Institute of Computer Science Department of Software Engineering and Programming Languages University of Augsburg Augsburg Germany

Developing security-critical applications is very difficult and the past has shown that many applications turned out to be erroneous after years of usage. For this reason it is desirable to have a sound methodology for developing security-critical e-commerce applications. We present an approach to model these applications with the Unified Modeling Language (UML) [1] extended by a UML profile to tailor our models to security applications. Our intent is to (semi-) automatically generate a formal specification suitable for verification as well as an implementation from the model. Therefore we offer a development method seamlessly integrating semi-formal and formal methods as well as the implementation. This is a significant advantage compared to other approaches not dealing with all aspects from abstract models down to code. Based on this approach we can prove security properties on the abstract protocol level as well as the correctness of the protocol implementation in Java with respect to the formal model using the refinement approach. In this paper we concentrate on the modeling with UML and some details regarding the transformation of this model into the formal specification. We illustrate our approach on an electronic payment system called Mondex [10]. Mondex has become famous for being the target of the first ITSEC evaluation of the highest level E6 which requires formal specification and verification.

关键词： Unified modeling language Object oriented modeling Formal specifications Java Application software Smart cards Communication system security Cryptographic protocols computer science Software engineering

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：