Only connect, securely

DOI10.1007/978-3-030-21759-4_5MaRDI QIDQ6190180zbMATH OpenFDO

Authors Chandrika Bhardwaj, Sanjiva Prasad

Publication date 6 February 2024

Published in Formal Techniques for Distributed Objects, Components, and Systems (Search for Journal in Brave)

Full work available at URL https://arxiv.org/abs/1903.02835

zbMATH Keywords

atomic operationsinformation flowLagois connectionnon-interferencesecurity class lattice

Mathematics Subject Classification ID

Galois correspondences, closure operators (in relation to ordered sets) (06A15) Complete lattices, completions (06B23) Models and methods for concurrent and distributed computing (process algebras, bisimulation, transition nets, etc.) (68Q85)

Abstract: The lattice model proposed by Denning in her seminal work provided secure information flow analyses with an intuitive and uniform mathematical foundation. Different organisations, however, may employ quite different security lattices. In this paper, we propose a connection framework that permits different organisations to exchange information while maintaining both security of information flows as well as their autonomy in formulating and maintaining security policy. Our prescriptive framework is based on the rigorous mathematical framework of Lagois connections given by Melton, together with a simple operational model for transferring object data between domains. The merit of this formulation is that it is simple, minimal, adaptable and intuitive, and provides a formal framework for establishing secure information flow across autonomous interacting organisations. We show that our framework is semantically sound, by proving that the connections proposed preserve standard correctness notions such as non-interference.

Recommendations

• Secure information flow connections
• Mediating secure information flow policies
• A Policy Model for Secure Information Flow
• scientific article; zbMATH DE number 1884409
• A demonic lattice of information

Cites work

• A lattice model of secure information flow
• Combining symbolic and numerical domains for information leakage analysis
• Datacentric semantics for verification of privacy policy compliance by mobile applications
• Dependent information flow types
• scientific article; zbMATH DE number 1948407 (Why is no real title available?)
• Lagois connections -- a counterpart to Galois connections
• Secure Information Flow as a Safety Property

Cited in

(2)

• Secure information flow connections
• Benign interaction of security domains

This page was built for publication: Only connect, securely

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q6190180)