2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)最新文献

Lattice-Based Information Flow Control-by-Construction for Security-by-Design 基于格的信息流构造控制与安全设计

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391565

Tobias Runge, Alexander Knüppel, Thomas Thüm, Ina Schaefer

{"title":"Lattice-Based Information Flow Control-by-Construction for Security-by-Design","authors":"Tobias Runge, Alexander Knüppel, Thomas Thüm, Ina Schaefer","doi":"10.1145/3372020.3391565","DOIUrl":"https://doi.org/10.1145/3372020.3391565","url":null,"abstract":"Many software applications contain confidential information, which has to be prevented from leaking through unauthorized access. To enforce confidentiality, there are language-based security mechanisms that rely on information flow control. Typically, these mechanisms work post-hoc by checking whether confidential data is accessed unauthorizedly after the complete program is written. The disadvantage is that incomplete programs cannot be interpreted properly and information flow properties cannot be built in constructively. In this work, we present a methodology to construct programs incrementally using refinement rules to follow a lattice-based information flow policy. In every refinement step, confidentiality and functional correctness of the program is guaranteed, such that insecure programs are prohibited by construction. Our contribution is fourfold. We formalize refinement rules for the constructive information flow control methodology, prove soundness of the refinement rules, show that our approach is at least as expressive as standard language-based mechanisms for information flow, and implement it in a graphical editor called CorC. Our methodology is also usable for integrity properties, which are dual to confidentiality.","PeriodicalId":448369,"journal":{"name":"2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)","volume":"5 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129098607","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 8

UML Consistency Rules: a Case Study with Open-Source UML Models UML一致性规则:开源UML模型的案例研究

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391554

Damiano Torre, Y. Labiche, M. Genero, M. Elaasar, C. Menghi

{"title":"UML Consistency Rules: a Case Study with Open-Source UML Models","authors":"Damiano Torre, Y. Labiche, M. Genero, M. Elaasar, C. Menghi","doi":"10.1145/3372020.3391554","DOIUrl":"https://doi.org/10.1145/3372020.3391554","url":null,"abstract":"UML models are standard artifacts used by software engineers for designing software. As software is designed, different UML diagram types (e.g., class diagrams and sequence diagrams) are produced by software designers. Since the various UML diagram types describe different aspects of a software system, they are not independent but strongly depend on each other, hence they must be consistent. Inconsistencies cause faults in the final software systems. It is, therefore, paramount that they get detected, analyzed, and fixed. Consistency rules are a useful tool proposed in the literature to detect inconsistencies. They categorize constraints that help in identifying inconsistencies when violated. This case study aims at collecting and analyzing UML models with OCL consistency rules proposed in the literature and at promoting the development of a reference benchmark that can be reused by the (FM-)research community. We collected 33 UML consistency rules and 206 different UML diagrams contained in 34 open-source UML models presented in the literature. We propose an FM-based encoding of the consistency rules in OCL. This encoding allows analyzing whether the consistency rules are satisfied or violated within the 34 UML models. To assess the proposed benchmark, we analyzed how the UML models, consistency rules, diagram types contained in the benchmark help in assessing the consistency of UML models, and the consistency of diagrams across the different software development phases. Our results show that the considered UML models and consistency rules allowed identifying 2731 inconsistencies and that those inconsistencies refer to different software development phases. We concluded that the considered UML models and consistency rules could be considered as an initial benchmark that can be further extended by the research community.","PeriodicalId":448369,"journal":{"name":"2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)","volume":"2 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"131549750","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 2

Rule-based Word Equation Solving 基于规则的单词方程求解

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391556

Joel D. Day, Mitja Kulczynski, F. Manea, Dirk Nowotka, D. B. Poulsen

引用次数: 4

Semantic-based Architecture Smell Analysis 基于语义的架构气味分析

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391564

Nacha Chondamrongkul, Jing Sun, I. Warren, S. Lee

引用次数: 0

Mind the gap: Robotic Mission Planning Meets Software Engineering 注意差距:机器人任务规划与软件工程

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391561

M. Askarpour, C. Menghi, Gabriele Belli, M. Bersani, Patrizio Pelliccione

{"title":"Mind the gap: Robotic Mission Planning Meets Software Engineering","authors":"M. Askarpour, C. Menghi, Gabriele Belli, M. Bersani, Patrizio Pelliccione","doi":"10.1145/3372020.3391561","DOIUrl":"https://doi.org/10.1145/3372020.3391561","url":null,"abstract":"In the context of robotic software, the selection of an appropriate planner is one of the most crucial software engineering decisions. Robot planners aim at computing plans (i.e., blueprint of actions) to accomplish a complex mission. While many planners have been proposed in the robotics literature, they are usually evaluated on showcase examples, making hard to understand whether they can be effectively (re)used for realising complex missions, with heterogeneous robots, and in real-world scenarios. In this paper we propose ENFORCE, a framework which allows wrapping FM-based planners into comprehensive software engineering tools, and considers complex robotic missions. ENFORCE relies on (i) realistic maps (e.g, fire escape maps) that describe the environment in which the robots are deployed; (ii) temporal logic for mission specification; and (iii) Uppaal model checker to compute plans that satisfy mission specifications. We evaluated ENFORCE by analyzing how it supports computing plans in real case scenarios, and by evaluating the generated plans in simulated and real environments. The results show that while ENFORCE is adequate for handling single-robot applications, the state explosion still represents a major barrier for reusing existing planners in multi-robot applications.","PeriodicalId":448369,"journal":{"name":"2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129589592","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 5

Verification of Privacy-Enhanced Collaborations 核实加强私隐合作计划

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391553

Sara Belluccini, R. Nicola, M. Dumas, Pille Pullonen, B. Re, F. Tiezzi

引用次数: 2

Towards Formally Verified Key Management for Industrial Control Systems 面向工控系统的正式验证密钥管理

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391555

T. Kulik, Jalil Boudjadar, Diego F. Aranha

{"title":"Towards Formally Verified Key Management for Industrial Control Systems","authors":"T. Kulik, Jalil Boudjadar, Diego F. Aranha","doi":"10.1145/3372020.3391555","DOIUrl":"https://doi.org/10.1145/3372020.3391555","url":null,"abstract":"Adoption of new digital technologies is impacting all aspects of society. While these new technologies are accepted rapidly within the consumer segment, in the area of industrial control systems the pace of change in computing is slower. This is often due to the criticality and security constraints of such systems, since degraded or hijacked control could lead to injuries or competitive disadvantages. Nowadays a critical component of control systems is the key management protocol for protecting communication. This is specifically important as more and more devices become part of industrial control networks. The key management system must be reliable and robust in order to ensure stable operation of the system with minimum downtime. This often means that the system needs to be autonomous and dynamic, capable of periodically changing the keys automatically and authenticating the system components. Different techniques have been used to examine the reliability and robustness of the key management systems, one promising approach is by using formal methods. In this paper we present a formally verified key management system for use within distributed industrial control systems. We demonstrate that the key management system can reliably handle authentication/communication operations in real-time as well as joining/leaving of control units within the system. We use UPPAAL to analyse several security properties, showing that our models satisfy a collection of requirements defined by our industrial partner and are viable for dynamic key management applications.CCS CONCEPTS• Security and privacy $rightarrow$ Key management; Formal security models; Authorization; Security protocols;","PeriodicalId":448369,"journal":{"name":"2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)","volume":"283 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122958055","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Minimal Assumptions Refinement for Realizable Specifications 可实现规范的最小假设细化

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391557

D. Cavezza, Dalal Alrajeh, A. György

{"title":"Minimal Assumptions Refinement for Realizable Specifications","authors":"D. Cavezza, Dalal Alrajeh, A. György","doi":"10.1145/3372020.3391557","DOIUrl":"https://doi.org/10.1145/3372020.3391557","url":null,"abstract":"A challenge that has gathered much attention in recent years is automated synthesis of correct-by-construction software systems from declarative specifications. The specification language is typically a subset of linear temporal logic called generalized reactivity of rank 1, for which there exists an efficient synthesis algorithm. Specifications in this language model the system as the interaction between an environment and a controller, the former satisfying a set of assumptions and the latter a set of guarantees. In order for a solution to exist, a sufficient set of assumptions implying the guarantees must be provided. The assumptions must be as general as possible and small enough to be intelligible by engineers that need to assess their consistency with the true environment where the synthesized controller will operate.The search for such assumptions is generally a refinement approach driven by counterstrategies, characterizations of undesirable environment behaviors that force the violation of the guarantees; assumptions are progressively refined in order to exclude such behaviors. In this work we provide a heuristic to drive this counterstrategy-guided search towards smaller refinements. We define a concept of minimality of refinements with respect to counterstrategies and provide an algorithm that provably finds minimal refinements with little time overhead. We show experimentally that it consistently produces one or more shorter solutions than state of the art for a set of popular case studies. We also demonstrate that in a popular case study (AMBA-AHB protocol) our heuristic finds a close-to-optimal solution that cannot be found by previous fully automated approaches.CCS CONCEPTS•Software and its engineering $rightarrow$ Formal software verification; Requirements analysis;•Hardware $rightarrow$ Buses and high-speed links.","PeriodicalId":448369,"journal":{"name":"2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE)","volume":"40 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2020-05-01","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"127739842","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 7

Active Learning of Decomposable Systems 可分解系统的主动学习

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391560

Omar al Duhaiby, J. F. Groote

引用次数: 0

Impact Analysis of Cyber-Physical Attacks on a Water Tank System via Statistical Model Checking 基于统计模型检验的水箱系统网络物理攻击影响分析

2020 IEEE/ACM 8th International Conference on Formal Methods in Software Engineering (FormaliSE) Pub Date : 2020-05-01 DOI: 10.1145/3372020.3391563

A. Munteanu, Michele Pasqua, Massimo Merro

引用次数: 2