Framework for the Formal Specification and Verification of Security Guidelines

Abstract

Ensuring the compliance of developed software with general and application-specific security requirements is a challenging task due to the lack of automatic and formal means to lead this verification. In this paper, we present our approach that aims at integrating the formal specification and verification of security guidelines in early stages of the development lifecycle by combining both the model checking analysis together with information flow analysis. We present our framework that is based on an extension of LTS (labelled transition Systems) by data dependence information to cover the end-to-end specification and verification of security guidelines.

A review on security requirements specification by formal methods

“…Zhioua et al 54 have presented a framework to provide understandable and clear feedback to the developer which finds out the exact error location in the program. The main problem discusses in this paper is the process of automatic verification of the systematic application and compliance of developed software.…”