Title :
How and why feedback composition fails [secure systems]
Author :
Zakinthinos, A. ; Lee, E.S.
Author_Institution :
Comput. Syst. Res. Inst., Toronto Univ., Ont., Canada
Abstract :
This paper examines the effects of the structure of the system on the composability of Generalized Non-Interference (GNI). It is proven that in a system constructed from GNI secure components, the only possible interconnection that can cause the system not to satisfy GNI occurs when two components are composed with feedback. We also present necessary and sufficient conditions for the composition of GNI secure components to yield a system that is GNI secure. The theorems are then used to provide a procedure to the system designer to construct a GNI secure system from GNI secure components. We also investigate reasons behind the composability of restrictiveness and n-forward correctability. It is shown that these properties compose because they eliminate one of the conditions that causes the composition of GNI secure components to fail
Keywords :
security of data; composability; feedback composition; generalized noninterference; n-forward correctability; necessary and sufficient conditions; restrictiveness; secure components; system designer; Communication system security; Communication systems; Feedback; Interference; Sections; Sufficient conditions;
Conference_Titel :
Computer Security Foundations Workshop, 1996. Proceedings., 9th IEEE
Conference_Location :
Kenmare
Print_ISBN :
0-8186-7522-5
DOI :
10.1109/CSFW.1996.503694
