Guaranteeing timed opacity using parametric timed model checking

Information leakage can have dramatic consequences on systems security. Among harmful information leaks, the timing information leakage occurs whenever an attacker successfully deduces confidential internal information. In this work, we consider that the attacker has access (only) to the system exec...

Full description

Saved in:
Bibliographic Details
Main Authors: ANDRÉ, Étienne, LIME, Didier, MARINHO, Dylan, SUN, Jun
Format: text
Language:English
Published: Institutional Knowledge at Singapore Management University 2022
Subjects:
Online Access:https://ink.library.smu.edu.sg/sis_research/7282
https://ink.library.smu.edu.sg/context/sis_research/article/8285/viewcontent/2206.05438.pdf
Tags: Add Tag
No Tags, Be the first to tag this record!
Institution: Singapore Management University
Language: English
id sg-smu-ink.sis_research-8285
record_format dspace
spelling sg-smu-ink.sis_research-82852022-09-22T07:25:31Z Guaranteeing timed opacity using parametric timed model checking ANDRÉ, Étienne LIME, Didier MARINHO, Dylan SUN, Jun Information leakage can have dramatic consequences on systems security. Among harmful information leaks, the timing information leakage occurs whenever an attacker successfully deduces confidential internal information. In this work, we consider that the attacker has access (only) to the system execution time. We address the following timed opacity problem: given a timed system, a private location and a final location, synthesize the execution times from the initial location to the final location for which one cannot deduce whether the system went through the private location. We also consider the full timed opacity problem, asking whether the system is opaque for all execution times. We show that these problems are decidable for timed automata (TAs) but become undecidable when one adds parameters, yielding parametric timed automata (PTAs). We identify a subclass with some decidability results. We then devise an algorithm for synthesizing PTAs parameter valuations guaranteeing that the resulting TA is opaque. We finally show that our method can also apply to program analysis. 2022-10-01T07:00:00Z text application/pdf https://ink.library.smu.edu.sg/sis_research/7282 info:doi/10.1145/3502851 https://ink.library.smu.edu.sg/context/sis_research/article/8285/viewcontent/2206.05438.pdf http://creativecommons.org/licenses/by-nc-nd/4.0/ Research Collection School Of Computing and Information Systems eng Institutional Knowledge at Singapore Management University opacity timed automata IMITATOR parameter synthesis Software Engineering
institution Singapore Management University
building SMU Libraries
continent Asia
country Singapore
Singapore
content_provider SMU Libraries
collection InK@SMU
language English
topic opacity
timed automata
IMITATOR
parameter synthesis
Software Engineering
spellingShingle opacity
timed automata
IMITATOR
parameter synthesis
Software Engineering
ANDRÉ, Étienne
LIME, Didier
MARINHO, Dylan
SUN, Jun
Guaranteeing timed opacity using parametric timed model checking
description Information leakage can have dramatic consequences on systems security. Among harmful information leaks, the timing information leakage occurs whenever an attacker successfully deduces confidential internal information. In this work, we consider that the attacker has access (only) to the system execution time. We address the following timed opacity problem: given a timed system, a private location and a final location, synthesize the execution times from the initial location to the final location for which one cannot deduce whether the system went through the private location. We also consider the full timed opacity problem, asking whether the system is opaque for all execution times. We show that these problems are decidable for timed automata (TAs) but become undecidable when one adds parameters, yielding parametric timed automata (PTAs). We identify a subclass with some decidability results. We then devise an algorithm for synthesizing PTAs parameter valuations guaranteeing that the resulting TA is opaque. We finally show that our method can also apply to program analysis.
format text
author ANDRÉ, Étienne
LIME, Didier
MARINHO, Dylan
SUN, Jun
author_facet ANDRÉ, Étienne
LIME, Didier
MARINHO, Dylan
SUN, Jun
author_sort ANDRÉ, Étienne
title Guaranteeing timed opacity using parametric timed model checking
title_short Guaranteeing timed opacity using parametric timed model checking
title_full Guaranteeing timed opacity using parametric timed model checking
title_fullStr Guaranteeing timed opacity using parametric timed model checking
title_full_unstemmed Guaranteeing timed opacity using parametric timed model checking
title_sort guaranteeing timed opacity using parametric timed model checking
publisher Institutional Knowledge at Singapore Management University
publishDate 2022
url https://ink.library.smu.edu.sg/sis_research/7282
https://ink.library.smu.edu.sg/context/sis_research/article/8285/viewcontent/2206.05438.pdf
_version_ 1770576297934716928