Formal verification of finite state transactional security policy

Fujian Normal University;ISN State Key Laboratory;Springer;Xidian University8th International Conference on Network and System Security, NSS 2014 -- 15 October 2014 through 17 October 2014 -- -- 109279Security policy helps to ensure that system always takes the desired input action sequence and works in a proper manner. Formal verification of finite state transactional security policy is necessary to check whether the given policy conforms to the specification. One way to specify finite state transactional security policy is by using a filter automaton. A filter automaton is an action sequence transformer that maps an input action sequence into another, so that the output action sequence obeys the specified policy. A method for verification of finite state transactional security policy enforced by filter automata is being proposed. The observable actions finite security automaton and the observable actions finite truncation automaton are used to verify a finite state transactional security policy. © Springer International Publishing Switzerland 2014