270 research outputs found

    Assumptions and guarantees for compositional noninterference

    Get PDF
    The idea of building secure systems by plugging together "secure" components is appealing, but this requires a definition of security which, in addition to taking care of top-level security goals, is strengthened appropriately in order to be compositional. This approach has been previously studied for information-flow security of shared-variable concurrent programs, but the price for compositionality is very high: a thread must be extremely pessimistic about what an environment might do with shared resources. This pessimism leads to many intuitively secure threads being labelled as insecure. Since in practice it is only meaningful to compose threads which follow an agreed protocol for data access, we take advantage of this to develop a more liberal compositional security condition. The idea is to give the security definition access to the intended pattern of data usage, as expressed by assumption-guarantee style conditions associated with each thread. We illustrate the improved precision by developing the first flow-sensitive security type system that provably enforces a noninterference-like property for concurrent programs. \ua9 2011 IEEE

    Composition and Declassification in Possibilistic Information Flow Security

    Get PDF
    Formal methods for security can rule out whole classes of security vulnerabilities, but applying them in practice remains challenging. This thesis develops formal verification techniques for information flow security that combine the expressivity and scalability strengths of existing frameworks. It builds upon Bounded Deducibility (BD) Security, which allows specifying and verifying fine-grained policies about what information may flow when to whom. Our main technical result is a compositionality theorem for BD Security, providing scalability by allowing us to verify security properties of a large system by verifying smaller components. Its practical utility is illustrated by a case study of verifying confidentiality properties of a distributed social media platform. Moreover, we discuss its use for the modular development of secure workflow systems, and for the security-preserving enforcement of safety and security properties other than information flow control

    CEEME: compensating events based execution monitoring enforcement for Cyber-Physical Systems

    Get PDF
    Fundamentally, inherently observable events in Cyber-Physical Systems with tight coupling between cyber and physical components can result in a confidentiality violation. By observing how the physical elements react to cyber commands, adversaries can identify critical links in the system and force the cyber control algorithm to make erroneous decisions. Thus, there is a propensity for a breach in confidentiality leading to further attacks on availability or integrity. Due to the highly integrated nature of Cyber-Physical Systems, it is also extremely difficult to map the system semantics into a security framework under existing security models. The far-reaching objective of this research is to develop a science of selfobfuscating systems based on the composition of simple building blocks. A model of Nondeducibility composes the building blocks under Information Flow Security Properties. To this end, this work presents fundamental theories on external observability for basic regular networks and the novel concept of event compensation that can enforce Information Flow Security Properties at runtime --Abstract, page iii

    The 10th Jubilee Conference of PhD Students in Computer Science

    Get PDF

    An Automata Based Approach for Verifying Information Flow Properties

    Get PDF
    AbstractWe present an automated verification technique to verify trace based information flow properties for finite state systems. We show that the Basic Security Predicates (BSPs) defined by Mantel in [Mantel, H., Possibilistic Definitions of Security – An Assembly Kit, in: Proceedings of the 13th IEEE Computer Security Foundations Workshop (2000), pp. 185–199], which are shown to be the building blocks of known trace based information flow properties, can be characterised in terms of regularity preserving language theoretic operations. This leads to a decision procedure for checking whether a finite state system satisfies a given BSP. Verification techniques in the literature (e.g. unwinding) are based on the structure of the transition system and are incomplete in some cases. In contrast, our technique is language based and complete for all information flow properties that can be expressed in terms of BSPs

    Design and Advanced Model Predictive Control of Wide Bandgap Based Power Converters

    Get PDF
    The field of power electronics (PE) is experiencing a revolution by harnessing the superior technical characteristics of wide-band gap (WBG) materials, namely Silicone Carbide (SiC) and Gallium Nitride (GaN). Semiconductor devices devised using WBG materials enable high temperature operation at reduced footprint, offer higher blocking voltages, and operate at much higher switching frequencies compared to conventional Silicon (Si) based counterpart. These characteristics are highly desirable as they allow converter designs for challenging applications such as more-electric-aircraft (MEA), electric vehicle (EV) power train, and the like. This dissertation presents designs of a WBG based power converters for a 1 MW, 1 MHz ultra-fast offboard EV charger, and 250 kW integrated modular motor drive (IMMD) for a MEA application. The goal of these designs is to demonstrate the superior power density and efficiency that are achievable by leveraging the power of SiC and GaN semiconductors. Ultra-fast EV charging is expected to alleviate the challenge of range anxiety , which is currently hindering the mass adoption of EVs in automotive market. The power converter design presented in the dissertation utilizes SiC MOSFETs embedded in a topology that is a modification of the conventional three-level (3L) active neutral-point clamped (ANPC) converter. A novel phase-shifted modulation scheme presented alongside the design allows converter operation at switching frequency of 1 MHz, thereby miniaturizing the grid-side filter to enhance the power density. IMMDs combine the power electronic drive and the electric machine into a single unit, and thus is an efficient solution to realize the electrification of aircraft. The IMMD design presented in the dissertation uses GaN devices embedded in a stacked modular full-bridge converter topology to individually drive each of the motor coils. Various issues and solutions, pertaining to paralleling of GaN devices to meet the high current requirements are also addressed in the thesis. Experimental prototypes of the SiC ultra-fast EV charger and GaN IMMD were built, and the results confirm the efficacy of the proposed designs. Model predictive control (MPC) is a nonlinear control technique that has been widely investigated for various power electronic applications in the past decade. MPC exploits the discrete nature of power converters to make control decisions using a cost function. The controller offers various advantages over, e.g., linear PI controllers in terms of fast dynamic response, identical performance at a reduced switching frequency, and ease of applicability to MIMO applications. This dissertation also investigates MPC for key power electronic applications, such as, grid-tied VSC with an LCL filter and multilevel VSI with an LC filter. By implementing high performance MPC controllers on WBG based power converters, it is possible to formulate designs capable of fast dynamic tracking, high power operation at reduced THD, and increased power density

    Spatial theory for biological design

    Get PDF
    Thesis (Ph. D. in Design and Computation)--Massachusetts Institute of Technology, Dept. of Architecture, 2013.Cataloged from PDF version of thesis.Includes bibliographical references (pages 181-189).Biological design is as ancient as human civilization. For thousands of years, living systems and natural processes have been manipulated by humans and their biological outcomes have been customized for different purposes. While the idea of biological design has always been prevalent throughout history, especially with the discovery of DNA, the ability to manipulate the form, function, and behavior of the living has significantly advanced. Today synthetic biology is pushing the frontiers of biological design even further. Now, living things can be completely abstracted from their original biological contexts, assembled like molecular constructs, and engineered like circuits or programmed like computational hardware. biological designers compose biological form and function by running modeling and simulation software; order standardized biological parts from online libraries and databases; utilize fabrication companies to synthesize gene products to prototype their designs; and build complex artifacts, applications and services that meet human wants, needs, fears, and desires on a daily basis. In this dissertation, I examine different practices of biological design in life sciences and engineering based on different theoretical models. I trace the history of information-based, relational, synthesis-oriented methods and present a new design framework that offers a spatial and a context-driven approach to the design of living matter. Being rooted in a different interpretation of space and spatiality in design, the framework approaches biological design systematically, at three stages: 1) the design of the basic units of the living (Units), 2) how different units are arranged and composed for different functionalities and behavior (Logic), and 3) the design of the biological contexts where biological artifacts live and perform their objectives (Context). This new framework intends to bring together a multitude of approaches from different design fields such as engineering, architecture and product Design that have their unique histories with living matter. The goal here is to demonstrate the ways different design paradigms can potentially shape our relationship with biological design in new ways; altering the design process, the objectives, the outcomes, and the social, cultural, and ethical perception of synthetic living.by Orkan Telhan.Ph.D.in Design and Computatio

    The 2018 GaN Power Electronics Roadmap

    Get PDF
    Gallium nitride (GaN) is a compound semiconductor that has tremendous potential to facilitate economic growth in a semiconductor industry that is silicon-based and currently faced with diminishing returns of performance versus cost of investment. At a material level, its high electric field strength and electron mobility have already shown tremendous potential for high frequency communications and photonic applications. Advances in growth on commercially viable large area substrates are now at the point where power conversion applications of GaN are at the cusp of commercialisation. The future for building on the work described here in ways driven by specific challenges emerging from entirely new markets and applications is very exciting. This collection of GaN technology developments is therefore not itself a road map but a valuable collection of global state-of-the-art GaN research that will inform the next phase of the technology as market driven requirements evolve. First generation production devices are igniting large new markets and applications that can only be achieved using the advantages of higher speed, low specific resistivity and low saturation switching transistors. Major investments are being made by industrial companies in a wide variety of markets exploring the use of the technology in new circuit topologies, packaging solutions and system architectures that are required to achieve and optimise the system advantages offered by GaN transistors. It is this momentum that will drive priorities for the next stages of device research gathered here
    • …
    corecore