Title
Automated verification of security policies in mobile code
Abstract
This paper describes an approach for the automated verification of mobile programs. Mobile systems are characterized by the explicit notion of locations (e.g., sites where they run) and the ability to execute at different locations, yielding a number of security issues.We give formal semantics to mobile systems as Labeled Kripke Structures, which encapsulate the notion of the location net. The location net summarizes the hierarchical nesting of threads constituting a mobile program and enables specifying security policies. We formalize a language for specifying security policies and show how mobile programs can be exhaustively analyzed against any given security policy by using model checking techniques. We developed and experimented with a prototype framework for analysis of mobile code, using the SATABS model checker. Our approach relies on SATABS's support for unbounded thread creation and enhances it with location net abstractions, which are essential for verifying large mobile programs. Our experimental results on various benchmarks are encouraging and demonstrate advantages of the model checking-based approach, which combines the validation of security properties with other checks, such as for buffer overflows.
Year
DOI
Venue
2007
10.1007/978-3-540-73210-5_3
IFM
Keywords
Field
DocType
satabs model checker,large mobile program,model checking technique,different location,automated verification,security policy,security property,mobile code,security issue,mobile program,mobile system,model checking,formal semantics,buffer overflow
Programming language,Abstraction,Model checking,Computer science,Mobile agent,Theoretical computer science,Thread (computing),Security policy,Mobile code,Computer security model,Distributed computing,Buffer overflow
Conference
Volume
ISSN
Citations 
4591
0302-9743
3
PageRank 
References 
Authors
0.38
20
3
Name
Order
Citations
PageRank
Chiara Braghin11058.86
Natasha Sharygina2106868.33
Katerina Barone-Adesi3151.03