Specification And Analysis Of A Security Management System

Abstract

This paper presents the specification and the analysis of a security management system called SM and the modeling methodology used to obtain this specification. This security management system centrally manages and administers security for systems such as network elements (NE) (for example, telecommunication switches and data transport equipment), operating support systems (OSS), and other types of computerized systems. This paper also describes the objectives and the functions of the SM system, which include access control management, security standard management, and auditing. It then focuses on one of the critical components of the system, the download/upload controller. A specification of this component is presented using Milner's Calculus of Communicating Systems (CCS). This formal specification is then analyzed through simulation, process equivalence, and model-checking.