Carvalho Quaresma, Jose Nuno

Denne afhandling præsenterer softwareplatformen Guided System Development (GSD), der har til formål at understøtte udviklingen af sikre kommunikations-systemer.Et kommunikationssystem er specificeret i et sprog der minder om Alice og Bob notationen; et simpelt og intuitivt sprog der beskriver det globale syn på kommunikation mellem forskellige aktører. Notationen brugt på GSD platformen udvider denne notation med begreber der tillader at sikkerhedskrav kan knyttes til udvekslede beskeder.Ud fra denne specifikation bliver udvikleren ført gennem en delvis automatisk oversættelse, der muliggør verificering og implementering af systemet. Over-sættelsen er delvis, fordi udvikleren har mulighed for at vælge hvilken imple-mentation der skal bruges for at opnå de ønskede sikkerhedskrav. Implemen-tationsmulighederne er givet ved moduler defineret til platformen. Platformens fleksibilitet tillader at der bliver tilføjet yderligere begreber der modellerer nye sikkerhedsegenskaber samt nye moduler der implementerer disse egenskaber. For at kunne give stærkere sikkerhedsgarantier kan specifikationen blive veri-ficeret af forskellige værktøjer inden for formelle metoder, så som Beliefs and Knowledge (BAK) — udviklet specielt til GSD platformen —, LySatool og OFMC. Platformens fleksibilitet — og det at systemet kan modelleres både fra et globalt synspunkt og et endepunkts-synspunkt — tillader at platformen også kan bruges med nye værktøjer.This thesis presents the Guided System Development (GSD) framework, which aims at supporting the development of secure communication systems.A communication system is specified in a language similar to the Alice and Bob notation, a simple and intuitive language used to describe the global perspective of the communications between different principals. The notation used in the GSD framework extends that notation with constructs that allow the security requirements of the messages to be described.From that specification, the developer is guided through a semi-automatic translation that enables the verification and implementation of the system. The translation is semi-automatic because the developer has the option of choosing which implementation to use in order to achieve the specified security requirements. The implementation options are given by plugins defined in the framework. The framework’s flexibility allows for the addition of constructs that model new security properties as well as new plugins that implement the security properties.In order to provide higher security assurances, the system specification can be verified by formal methods tools such as the Beliefs and Knowledge (BAK) tool — developed specifically for the GSD framework —, LySatool and OFMC. The framework’s flexibility and the existence of the system model in different perspectives — an overall global perspective and an endpoint perspective —allow the connection to new formal methods tools.The modeled system is also translated into code that implements the communication skeleton of the system and can then be used by the system designer. New output languages can also easily be added to the GSD framework.Additionally, a prototype of the GSD framework was implemented and an ex-ample of using the GSD framework in a real world system is presented

Online Research Database In Technology

On Building Secure Communication Systems

http://orbit.dtu.dk/ws/files/92546791/On_Building_Secure.pdf

On Building Secure Communication Systems

Abstract

Similar works

Full text

Available Versions

Online Research Database In Technology