Unwinding and Inference Control

Joseph A. Goguen, Jose Meseguer

Research output: Contribution to journalConference articlepeer-review

Abstract

This paper discusses two main ideas, unwinding and inference control. While both concern computer security, they are not closely related to each other. Unwinding is a verification technique for general security requirements based on noninterference assertions as in [Goguen Meseguer 82a]. The inference control problem concerns preventing inference of unauthorized information by combining authorized information. The main result in this paper is an unwinding theorem that gives a very simple necessary and sufficient condition for a system to satisfy the MLS security policy system. A subsidiary topic is secure interfaces, which we show how to treat with noninterferce assertions.

Original languageEnglish (US)
Article number6234812
Pages (from-to)75-86
Number of pages12
JournalProceedings - IEEE Symposium on Security and Privacy
Volume2012-July
Issue numberJuly
DOIs
StatePublished - Jul 6 2012
Externally publishedYes
Event5th IEEE Symposium on Security and Privacy, SP 1984 - Oakland, United States
Duration: Apr 29 1984May 2 1984

ASJC Scopus subject areas

  • Safety, Risk, Reliability and Quality
  • Software
  • Computer Networks and Communications

Fingerprint Dive into the research topics of 'Unwinding and Inference Control'. Together they form a unique fingerprint.

Cite this