Formal Modeling for Security Behavior Analysis of Computer Systems

Abstract

This paper proposes a formal framework aimed at specifying and verifying computer systems security behavior. In this approach, systems and their interactions are modeled through processes with a new dedicated calculus inspired from the ambient calculus. We demonstrate how, given a network security policy implementation, our dedicated calculus allows to verify that the specification offers or not sufficient protection from a malicious intruder.