Integrating RBAC, MIC, and MLS in Verified Hierarchical Security Model for Operating System

Devyanin, P. N.

doi:10.15514/ispras-2020-32(1)-1

Cited by 1 publication

(1 citation statement)

References 15 publications

Supporting

Mentioning

Contrasting

Unclassified

Order By: Relevance

“…Для верификации моделей управления доступом используют как метод проверки модели [7][8][9][10], так и методы дедуктивной верификации [11][12][13][14][15]. Метод проверки моделей подвержен проблеме взрыва числа состояний.…”

Section: выбор метода и инструмента верификацииunclassified

Formal Verification of a Mandatory Integrity Control Model for the KasperskyOS Operating System

Burenkov¹

2020

Proceedings of ISP RAS

View full text Add to dashboard Cite

Models of mandatory integrity control in operating systems usually restrict accesses of active components of a system to passive ones and represent the accesses directly. This is suitable in case of monolithic operating systems whose components that provide access to resources are part of the trusted computing base. However, due to the sheer complexity of such components, it is extremely nontrivial to prove such a model to be adequate to the real system. KasperskyOS is a microkernel operating system that organizes access to resources via components that are not necessarily part of the trusted computing base. KasperskyOS implements a specifically developed mandatory integrity control model that takes such components into account. This paper formalizes the model and describes the process of automated proof of the model’s properties. For formalization, we use the Event-B language. We clarify parts specific to Event-B to make our presentation accessible to professionals familiar with discrete mathematics but not necessarily with Event-B. We reflect on the proof experience obtained in the Rodin platform.

show abstract

Section: выбор метода и инструмента верификацииunclassified

Formal Verification of a Mandatory Integrity Control Model for the KasperskyOS Operating System

Burenkov¹

2020

Proceedings of ISP RAS

View full text Add to dashboard Cite

show abstract

Integrating RBAC, MIC, and MLS in Verified Hierarchical Security Model for Operating System

Cited by 1 publication

References 15 publications

Formal Verification of a Mandatory Integrity Control Model for the KasperskyOS Operating System

Formal Verification of a Mandatory Integrity Control Model for the KasperskyOS Operating System

Contact Info

Product

Resources

About