检索结果-内蒙古大学图书馆

Evaluation of Jif and Joana as information flow analyzers in a model-driven approach

Evaluation of Jif and Joana as information flow analyzers in...

7th International Workshop on Data Privacy Management, DPM 2012 and 5th International Workshop on Autonomous and Spontaneous Security, SETOP 2012

作者： Katkalov, Kuzman Fischer, Peter Stenzel, Kurt Moebius, Nina Reif, Wolfgang Department of Software Engineering and Programming Languages University of Augsburg Germany

ISBN: (纸本)9783642358890

Checking for information leaks in real-world applications is a difficult task. IFlow is a model-driven approach which allows to develop information flow-secure applications using intuitive modeling guidelines. It supports the automatic generation of partial Java code while also providing the developer with the ability to formally verify complex information flow properties. To simplify the formal verification, we integrate an automatic Java application information flow analyzer, allowing to check simple noninterference properties. In this paper, we evaluate both Jif and Joana as such analyzers to determine the best suiting information flow control tool in the context of, but not limited to the IFlow approach. © 2013 Springer-Verlag.

关键词： Java programming language

来源：评论

学校读者我要写书评

暂无评论

Code abstractions for automatic information flow control in a model-driven approach 10th

Code abstractions for automatic information flow control in ...

引用

10th International Conference on Security, Privacy and Anonymity in Computation, Communication and Storage, SpaCCS 2017

作者： Katkalov, Kuzman Stenzel, Kurt Reif, Wolfgang Department of Software Engineering and Programming Languages University of Augsburg Augsburg Germany

ISBN: (纸本)9783319723945

Automatic information flow control (IFC) can be used to guarantee the absence of information leaks in security-critical applications. However, IFC of real-world, complex, distributed systems is challenging. In this paper, we show how a model-driven approach for development of such applications consisting of mobile apps and web services can help solve those challenges using automatic code abstractions. © Springer International Publishing AG 2017.

关键词： Abstracting

来源：评论

学校读者我要写书评

暂无评论

A modeling framework for the development of provably secure E-commerce applications

A modeling framework for the development of provably secure ...

引用

2nd International Conference on software engineering Advances - ICSEA 2007

作者： Moebius, Nina Haneberg, Dominik Reif, Wolfgang Schellhorn, Gerhard Institute of Computer Science University Augsburg Department of Software Engineering and Programming Languages 86135 Augsburg Germany

ISBN: (纸本)0769529372

Developing security-critical applications is very difficult and the past has shown that many applications turned out to be erroneous after years of usage. For this reason it is desirable to have a sound methodology for developing security-critical E-Commerce applications. We present an approach to model these applications with the unified modeling language (UML) [1] extended by a UML profile to tailor our models to security applications. Our intent is to (semi-) automatically generate a formal specification suitable for verification as well as an implementation from the model. Therefore we offer a development method seamlessly integrating semi-formal and formal methods as well as the implementation. This is a significant advantage compared to other approaches not dealing with all aspects from abstract models down to code. Based on this approach we can prove security properties on the abstract protocol level as well as the correctness of the protocol implementation in Java with respect to the formal model using the refinement approach. In this paper we concentrate on the modeling with UML and some details regarding the transformation of this model into the formal specification. We illustrate our approach on an electronic payment system called Mondex [10]. Mondex has become famous for being the target of the first ITSEC evaluation of the highest level E6 which requires formal specification and verification. © 2007 IEEE.

关键词： Unified Modeling Language

来源：评论

学校读者我要写书评

暂无评论

WIP: An Engaging Undergraduate Intro to Model Checking in software engineering Using TLA+ 54

WIP: An Engaging Undergraduate Intro to Model Checking in So...

引用

54th IEEE Frontiers in Education Conference, FIE 2024

作者： Läufer, Konstantin Mertin, Gunda Thiruvathukal, George K. Loyola University Software and Systems Laboratory Department of Computer Science Chicago United States Institute for Software Engineering and Programming Languages University of Lübeck Germany

ISBN: (纸本)9798350351507

Background: In this Innovative Practice Work in Progress, we present our initial efforts to integrate formal methods, with a focus on model-checking specifications written in Temporal Logic of Actions (TLA+), into computer science education, targeting undergraduate juniors/seniors and graduate students. Many safety-critical systems and services crucially depend on correct and reliable behavior. Formal methods can play a key role in ensuring correct and safe system behavior, yet remain underutilized in educational and industry contexts. Aims: We aim to (1) qualitatively assess the state of formal methods in computer science programs, (2) construct level-appropriate examples that could be included midway into one's undergraduate studies, (3) demonstrate how to address successive 'failuresy' through progressively stringent safety and liveness requirements, and (4) establish an ongoing framework for assessing interest and relevance among students. Methods: We detail our pedagogical strategy for embedding TLA+ into an intermediate course on formal methods at our institution. After starting with a refresher on mathematical logic, students specify the rules of simple puzzles in TLA+ and use its included model checker (known as TLC) to find a solution. We gradually escalate to more complex, dynamic, event-driven systems, such as the control logic of a microwave oven, where students will study safety and liveness requirements. We subsequently discuss explicit concurrency, along with thread safety and deadlock avoidance, by modeling bounded counters and buffers. Results: Our initial findings suggest that through careful curricular design and choice of examples and tools, it is possible to inspire and cultivate a new generation of software engineers proficient in formal methods. Conclusions: Our initial efforts suggest that 84% of our students had a positive experience in our formal methods course. Our future plans include a longitudinal analysis within our own institution and

关键词： Students

来源：评论

学校读者我要写书评

暂无评论

Optimistic Versioning for Conflict-tolerant Collaborative Blended Modeling 10

Optimistic Versioning for Conflict-tolerant Collaborative Bl...

引用

STAF 2022 Workshop: 10th International Workshop on Bidirectional Transformations, BX 2022, 2nd International Workshop on Foundations and Practice of Visual Modeling, FPVM 2022 and 2nd International Workshop on MDE for Smart IoT Systems, MeSS 2022

作者： Exelmans, Joeri Pietron, Jakob Raschke, Alexander Vangheluwe, Hans Tichy, Matthias Department of Computer Science University of Antwerp - Flanders Make Antwerp Belgium Institute of Software Engineering and Programming Languages Ulm University Ulm Germany

Optimistic versioning is a key component in supporting collaborative workflows. Text-based versioning has been widely adopted for versioning code, but in model-driven engineering, dealing with visual concrete syntaxes, new methods are required. In the case of blended modeling, a mixture of both textual and visual syntaxes, concurrently editable and synchronizable, introduces additional challenges. We propose a type of operation-based versioning to record not only user edits, but also bi-directional change propagations between concrete and abstract syntax. This way we can support blended modeling with layout continuity, and flexible handling of missing information (e. g., layout information) when rendering changes from abstract to concrete syntax. In addition, the proposed versioning approach enables collaborative conflict resolution by allowing partial conflict resolution, thus deferring a final resolution. © 2022 Copyright for this paper by its authors. Use permitted under Creative Commons License Attribution 4.0 International (CC BY 4.0).

关键词： Abstracting

来源：评论

学校读者我要写书评

暂无评论

Device- And service profiles for integrated or systems based on open standards

引用

Current Directions in Biomedical engineering 2015年第1期1卷 538-542页

作者： Mildner, Alexander Janß, Armin Dell'Anna-Pudlik, Jasmin Merz, Paul Leucker, Martin Radermacher, Klaus UniTransferKlinik Lübeck Maria-Goeppert-Straße 1 Lübeck 23562 Germany Institute for Software Engineering and Programming Languages University of Lübeck Germany Department of Medical Engineering Helmholtz-Institute for Biomedical Engineering RWTH Aachen University Germany

Integrated OR systems nowadays are closed and proprietary, so that the interconnection of components from third-party vendors is only possible with high time and cost effort. An integrated operating theatre with open interfaces, giving clinical operators the opportunity to choose individual medical devices from different manufacturers, is currently being developed in the framework of the BMBF (Federal Ministry of Education and Research) funded project *** [1]. Actual standards and concepts regarding technical feasibility and accreditation process do not cope with the requirements for modular integration based on an open standard. Therefore, strategies as well as service and device profiles to enable a procedure for risk management and certifiability are in the focus of the project work. Amongst others, a concept for User Interface Profiles (UI-Profiles) has been conceived in order to describe medical device functions and the entire user interface regarding Human-Machine-Interaction (HMI) characteristics with the aim to identify human-induced risks of central user interfaces. The use of standardized device and service profiles shall allow the manufacturers to integrate their medical devices in the *** network, without disclosing the medical devices' risk analysis and related confidential knowledge or proprietary information. © 2015 by Walter de Gruyter GmbH, Berlin/Boston 2015.

关键词： Usability engineering

来源：评论

学校读者我要写书评

暂无评论

Integrated smart home services and smart wearable technology for the disabled and elderly 4

Integrated smart home services and smart wearable technology...

引用

4th International Conference on Data Management Technologies and Applications, DATA 2015

作者： Tuna, Ayse Das, Resul Tuna, Gurkan School of Foreign Languages Trakya University Edirne Turkey Department of Software Engineering Firat University Elazig Turkey Department of Computer Programming Trakya University Edirne Turkey

ISBN: (纸本)9789897581038

Smart Home is indeed a broad concept which includes the techniques and systems applied to living spaces. While its main goal is to reduce the consumption of energy, it provides many benefits including living in comfort, security and increasing flexibility. Smart homes are achieved through networking, control and automation technologies. Since smart homes offer more comfort and security and provide novel innovative services, people with disabilities or the elderly can take the advantages and improve their life quality. However, for such novel services, an analytical infrastructure which can manage overall data flow provided by various sensors, understand anomalous behaviour, and make necessary decisions. In this study, for efficient data handling and visualisation, an integrated smart service approach based on the use of a smart vest is proposed. The smart vest plays a key role in the proposed system since it provides the main health parameters of the monitored person to the smart home service and enables tracking of the monitored person's location. The proposed system offers many benefits to both people with disabilities and the elderly and their families in terms of increased efficiency of health care service and comfort for the monitored person. It can also reduce the cost of health care services by reducing the number of periodical visits.

关键词： Wearable technology

来源：评论

学校读者我要写书评

暂无评论

Model-Driven Code Generation for Secure Smart Card Applications

Model-Driven Code Generation for Secure Smart Card Applicati...

引用

Australian Conference on software engineering

作者： Nina Moebius Kurt Stenzel Holger Grandy Wolfgang Reif Department of Software Engineering and Programming Languages University of Augsburg Germany

ISBN: (纸本)9781424437689

SecureMDD is a model-driven approach to develop secure systems with a special focus on smart card applications. Based on a platform-independent UML model of the system under development we generate a platform-specific model, and finally executable code. The Secure MDD approach also allows to generate a formal specification where security properties can be proven formally. In this paper we describe the automatic generation of Java Card code from UML class and activity diagrams in detail. The full code running on the smart card is generated which is not trivial because of the limitations of smart cards and the specialties of Java Card.

关键词： Smart cards Application software Security Java software engineering Unified modeling language Formal specifications Service oriented architecture Protocols Computer languages

来源：评论

学校读者我要写书评

暂无评论

SecureMDD: A Model-Driven Development Method for Secure Smart Card Applications

SecureMDD: A Model-Driven Development Method for Secure Smar...

引用

International Conference on Availability, Reliability and Security, ARES

作者： Nina Moebius Kurt Stenzel Holger Grandy Wolfgang Reif Department of Software Engineering and Programming Languages University of Augsburg Germany

In this paper we introduce our model-driven software engineering method, called SecureMDD, which facilitates the development of security-critical applications that are based on cryptographic protocols. The approach seamlessly integrates the generation of code and formal methods. Starting with a platform-independent UML model of a system under development, we generate executable Java (Card) code as well as a formal model from the UML model. Subsequent to this, the formal model is used to verify the security of the modeled system. Our goal is to prove that the generated code is correct w.r.t. the generated formal model in terms of formal refinement. The approach is tailored to the domain of security-critical systems, e.g. smart card applications.

关键词： Smart cards Unified modeling language Security Java Application software software engineering Cryptographic protocols Availability Computer languages Electronic mail

来源：评论

学校读者我要写书评

暂无评论

Non-intrusive MC/DC measurement based on traces 13

Non-intrusive MC/DC measurement based on traces

引用

13th International Symposium on Theoretical Aspects of software engineering, TASE 2019

作者： Ahishakiye, Faustin Jaksic, Svetlana Lange, Felix Dino Schmitz, Malte Stolz, Volker Thoma, Daniel Department of Computing Mathematics and Physics Western Norway University of Applied Sciences Bergen Norway Institute for Software Engineering and Programming Languages University of Lübeck Lübeck Germany

ISBN: (纸本)9781728133423

We present a novel, non-intrusive approach to MC/DC coverage measurement using modern processor-based tracing facilities. Our approach does not require recompilation or instrumentation of the software under test. Instead, we use the Intel Processor Trace (Intel PT) facility present on modern Intel CPUs. Our tooling consists of the following parts: a frontend that detects so-called decisions (Boolean expressions) that are used in conditionals in C source code, a mapping from conditional jumps in the object code back to those decisions, and an analysis that computes satisfaction of the MC/DC coverage relation on those decisions from an execution trace. This analysis takes as input a stream of instruction addresses decoded from Intel PT trace data, which was recorded while running the software under test. We describe our architecture and discuss limitations and future work. © 2019 IEEE.

关键词： software testing

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：