Integrated Specification and Verification of Security Protocols and Policies

Simone Frau, Mohammad Torabi-Dashti
2011 2011 IEEE 24th Computer Security Foundations Symposium  
We propose a language for formal specification of serviceoriented architectures. The language supports the integrated specification of communication level events, policy level decisions, and the interaction between the two. We show that the reachability problem is decidable for a fragment of service-oriented architectures. The decidable fragment is well suited for specifying, and reasoning about, securitysensitive architectures. In the decidable fragment, the attacker controls the communication
more » ... media. The policies of services are centered around the trust application and trust delegation rules, and can also express rbac systems with role hierarchy. The fragment is of immediate practical relevance: we have specified and verified a number of security-sensitive architectures stemming from the e-government domain.
doi:10.1109/csf.2011.9 dblp:conf/csfw/FrauD11 fatcat:lcmxhaenhzhgxiv4gwxtiuhira