A Dual Framework for High Assurance Distributed Object Security
نویسندگان
چکیده
High assurance security is extremely di cult to acheive in distributed computer systems due to their inherent non-determinism and heterogeneity. The practical application of formal methods is the key to high assurance security in open, distributed environments. This paper presents a methodology that applies formal methods within a dual framework to achieve secure interoperation of heterogeneous distributed objects. The framework is composed of two hierarchies, one containing the formal operational semantics of a distributed system and the other containing its axiomatic semantics in higher order logic. The foundation for the framework is provided by ROC, a process calculus tailored to concurrent and distributed objects. Successive layers in the hierarchies contain semantics for more abstract object models. The operational layers are endowed with ROC's formal semantics and can be used to derive axiomatic semantics for dual axiomatic layers. The axiomatic hierarchy contains HOL semantics for each layer of abstraction and thus supports high{level reasoning
منابع مشابه
Model Meta - Object Model
High assurance security is extremely diicult to acheive in distributed computer systems due to their inherent non-determinism and heterogeneity. The practical application of formal methods is the key to high assurance security in open, distributed environments. This paper presents a methodology that applies formal methods within a dual framework to achieve secure interoperation of heterogeneous...
متن کاملA Framework for High Assurance Security of Distributed Objects
High assurance security is di cult to achieve in distributed computer systems and databases because of their complexity, non-determinism and inherent heterogeneity. The practical application of formal methods is the key to high assurance security in open, distributed environments. This paper proposes the use of formal methods and a special layered architecture to achieve secure interoperation o...
متن کاملAn Environment for Developing Securely Interoperable Heterogeneous Distributed Objects
PROJECT DESCRIPTION The heterogeneity a n d v olatility of open distributed systems make high assurance security a n elusive goal. One solution is to provide developers with tools for designing and implementing robust object systems with veriiable behavior in open environments (Cleaveland et al., 1 9 9 4). The Meta-Object Operating System Environment (MOOSE) (Hale et al., 1997) is intended to s...
متن کاملRole Delegation for a Distributed, Unified RBAC/MAC*
The day-today operations of corporations and government agencies rely on inter-operating legacy, COTs, databases, clients, servers, etc., which are brought together into a distributed environment running middleware (e.g., CORBA, JINI, DCOM, etc.). Both access control and security assurance within these distributed applications is paramount. Of particular concern is the delegation of authority, ...
متن کاملA Security Design for a Wide-Area Distributed System
Designing security of wide-area distributed systems is a highly complicated task. The complexity of underlying distribution and replica-tion infrastructures together with the diversity of application scenarios increases the number of security requirements that must be addressed. High assurance requires the security enforcement to be isolated from non-security relevant functions and limited in t...
متن کامل