Related Experiment Videos
On the verification of intransitive noninterference in mulitlevel security
Nejib Ben Hadj-Alouane1, Stéphane Lafrance, Feng Lin
1CRISTAL Laboratory, Department of Applied Computer Sciences, National School of Information Sciences, University of Manouba, Tunisia. nejib.benhadjalouane@ensi.rnu.tn
Abstract:
We propose an algorithmic approach to the problem of verification of the property of intransitive noninterference (INI), using tools and concepts of discrete event systems (DES). INI can be used to characterize and solve several important security problems in multilevel security systems. In a previous work, we have established the notion of iP-observability, which precisely captures the property of INI. We have also developed an algorithm for checking iP-observability by indirectly checking P-observability for systems with at most three security levels. In this paper, we generalize the results for systems with any finite number of security levels by developing a direct method for checking iP-observability, based on an insightful observation that the iP function is a left congruence in terms of relations on formal languages. To demonstrate the applicability of our approach, we propose a formal method to detect denial of service vulnerabilities in security protocols based on INI. This method is illustrated using the TCP/IP protocol. The work extends the theory of supervisory control of DES to a new application domain.
Related Concept Videos
Norton's Theorem
Strategies of Self-Presentation II: Self-Verification
Constraints and Statical Determinacy
Net Change Theorem
Woodward–Hoffmann Selection Rules and Microscopic Reversibility
Types of Errors: Detection and Minimization
Absolute error in a measurement is the numerical difference from the true or central value. Relative error is the ratio between absolute error and the true or central value, expressed as a percentage.
Errors can be classified by source, magnitude, and sign. There are three types of errors: systematic, random, and gross.
Systematic or...