Security modelling using hierarchical state machines

Abstract

The paper defines a modelling scheme that allows for abstraction to simplify security analysis, while at the same time permitting a full description of detailed system behaviour. The basis for the model is a hierarchy of state machines. The security equivalence of the varying levels of abstraction is proven, thereby demonstrating the validity of the model. Also, practical considerations regarding the application of the model to real systems are presented.<>