How and why feedback composition fails [secure systems]

Author

Zakinthinos, A. ; Lee, E.S.

Author_Institution

Comput. Syst. Res. Inst., Toronto Univ., Ont., Canada

fYear

1996

fDate

10-12 Jun 1996

Firstpage

95

Lastpage

101

Abstract

This paper examines the effects of the structure of the system on the composability of Generalized Non-Interference (GNI). It is proven that in a system constructed from GNI secure components, the only possible interconnection that can cause the system not to satisfy GNI occurs when two components are composed with feedback. We also present necessary and sufficient conditions for the composition of GNI secure components to yield a system that is GNI secure. The theorems are then used to provide a procedure to the system designer to construct a GNI secure system from GNI secure components. We also investigate reasons behind the composability of restrictiveness and n-forward correctability. It is shown that these properties compose because they eliminate one of the conditions that causes the composition of GNI secure components to fail

Keywords

security of data; composability; feedback composition; generalized noninterference; n-forward correctability; necessary and sufficient conditions; restrictiveness; secure components; system designer; Communication system security; Communication systems; Feedback; Interference; Sections; Sufficient conditions;

fLanguage

English

Publisher

ieee

Conference_Titel

Computer Security Foundations Workshop, 1996. Proceedings., 9th IEEE

Conference_Location

Kenmare

ISSN

1063-6900

Print_ISBN

0-8186-7522-5

Type

conf

DOI

10.1109/CSFW.1996.503694

Filename

503694