A Reputation System for Multirole Sessions

Bono, Viviana; Capecchi, Sara; Castellani, Ilaria; Dezani‐Ciancaglini, Mariangiola

doi:10.1007/978-3-642-30065-3_1

Cited by 6 publications

(4 citation statements)

References 14 publications

(36 reference statements)

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For instance, in [2] session types are extended with correspondence assertions, a form of dependent types which ensures consistency of data during computation. More recently, aspects of secure information flow and access control have been addressed for sessions in [3,5,6]. A kind of role-based approach is used in [7], where communication is controlled by a previously acquired reputation.…”

Section: Related Work and Concluding Remarksmentioning

confidence: 99%

Dynamic Role Authorization in Multiparty Conversations

Ghilezan

Jakšić

Pantović

et al. 2014

Electron. Proc. Theor. Comput. Sci.

View full text Add to dashboard Cite

Protocol specifications often identify the roles involved in communications. In multiparty protocols that involve task delegation it is often useful to consider settings in which different sites may act on behalf of a single role. It is then crucial to control the roles that the different parties are authorized to represent, including the case in which role authorizations are determined only at runtime. Building on previous work on conversation types with flexible role assignment, here we report initial results on a typed framework for the analysis of multiparty communications with dynamic role authorization and delegation. In the underlying process model, communication prefixes are annotated with role authorizations and authorizations can be passed around. We extend the conversation type system so as to statically distinguish processes that never incur in authorization errors. The proposed static discipline guarantees that processes are always authorized to communicate on behalf of an intended role, also covering the case in which authorizations are dynamically passed around in messages.Comment: In Proceedings BEAT 2014, arXiv:1408.556

show abstract

Section: Related Work and Concluding Remarksmentioning

confidence: 99%

Dynamic Role Authorization in Multiparty Conversations

Ghilezan

Jakšić

Pantović

et al. 2014

Electron. Proc. Theor. Comput. Sci.

View full text Add to dashboard Cite

show abstract

“…We prefer leaving these choices unspecified, for the sake of generality, as in our opinion different application scenarios may call for different adaptation functions and alternative strategies to cope with system degradation due to nonce generation. For instance, reputation mechanisms [BCCD12] could be added in order to refine/guide the reaction to major security violations based on a nonce record for each participant. It would be also interesting to define adaptation functions which depend on the current (type)state of the monitors; this mechanism has been developed in [DP16] for structured protocols using type-directed checks and event-based adaptation.…”

Section: Discussionmentioning

confidence: 99%

Self-adaptation and secure information flow in multiparty communications

2016

Self Cite

View full text Add to dashboard Cite

Abstract. We present a comprehensive model of structured communications in which self-adaptation and security concerns are jointly addressed. More specifically, we propose a model of multiparty, self-adaptive communications with access control and secure information flow guarantees. In our model, multiparty protocols (choreographies) are described as global types; security violations occur when process implementations of protocol participants attempt to read or write messages of inappropriate security levels within directed exchanges. Such violations trigger adaptation mechanisms that prevent the violations to occur and/or to propagate their effect in the choreography. Our model is equipped with local and global adaptation mechanisms for reacting to security violations of different gravity; type soundness results ensure that the overall multiparty protocol is still correctly executed while the system adapts itself to preserve the participants' security.

show abstract

“…In the recent literature global types have been enriched in various directions by making them more expressive through roles [5,12] or logical assertions [13] or states [14] or monitoring [7], and by making them safer through security levels for data and participants [15,16] or reputation systems [17].…”

Section: Related Work and Conclusionmentioning

confidence: 99%

Lightening global types

Chen

2015

Journal of Logical and Algebraic Methods in Programming

View full text Add to dashboard Cite

Global session types prevent participants from waiting for never coming messages. Some interactions take place just for the purpose of informing receivers that some message will never arrive or the session is terminated. By decomposing a big global type into several light global types, one can avoid such kind of redundant interactions. This work proposes a framework which allows to easily decompose global types into light global types, preserving the interaction sequences of the original ones but for redundant interactions.

show abstract

A Reputation System for Multirole Sessions

Cited by 6 publications

References 14 publications

Dynamic Role Authorization in Multiparty Conversations

Dynamic Role Authorization in Multiparty Conversations

Self-adaptation and secure information flow in multiparty communications

Lightening global types

Contact Info

Product

Resources

About