A formal framework to integrate timed security rules within a TEFSM-based system specification - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2009

A formal framework to integrate timed security rules within a TEFSM-based system specification

Résumé

Formal methods are very useful in software industry and are becoming of paramount importance in practical engineering techniques. They involve the design and the modeling of various system aspects expressed usually through different paradigms. In this paper, we propose to combine two modeling formalisms in order to express both functional and security timed requirements of a system. First, the system behavior is specified based on its functional requirements using TEFSM (Timed Extended Finite State Machine) formalism. Second, this model is augmented by applying a set of dedicated algorithms to integrate timed security requirements specified in Nomad language. This language is well adapted to express security properties such as permissions, prohibitions and obligations with time considerations. The resulting secure model can be used for several purposes such as code generation, specification correctness proof, model checking or automatic test generation. In this paper, we applied our approach to a France Telecom(France Telecom is the main telecommunication company in France) Travel service in order to demonstrate its feasibility
Fichier principal
Vignette du fichier
mallouli2009.pdf (125.83 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-00444089 , version 1 (24-02-2021)

Identifiants

Citer

Wissam Mallouli, Amel Mammar, Ana Rosa Cavalli. A formal framework to integrate timed security rules within a TEFSM-based system specification. APSEC 2009 : 16th AsiaPacific Software Engineering Conference, Dec 2009, Batu Ferringhi, Malaysia. pp.489 - 496, ⟨10.1109/APSEC.2009.52⟩. ⟨hal-00444089⟩
217 Consultations
44 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More