Refinement of information flow architectures

Abstract

A calculus is presented for the stepwise refinement of abstract information flow architectures. We give a mathematical model for information flow components based on relations between input and output communication histories, and describe system architectures using two views: the glass box view is a network of basic components, while the black box view regards the network itself as a component. This allows us to hierarchically compose systems.The calculus consists of basic rules to add or remove components and channels, and to replace components by subnetworks and vice versa. The correctness of the rules is justified by the refinement relation on the black box view of architectures.[PR97b] J. Philipps, B. Rumpe. Refinement of Information Flow Architectures.

Computing Refactorings of Behavior Models

“…We do not consider architectural modifications such as the addition of components here [15,17,18]. Interface modifications add or delete input or output channels to or from a system.…”

Architectural Refinement and Notions of Intransitive Noninterference

“…In general, work on architectural refinement [PR97,Bar05] is concerned with behavioural notions of refinement, and has not taken security into account. An interesting exception is a sequence of papers by Moriconi et al, [MQR95,MQ94], who develop a very abstract formal account of architecture refinement in which architectural designs are represented as logical theories and refinement is treated as a mapping of the symbols of the abstract theory to those of the concrete theory that must satisfy the logical condition of being a faithful interpretation.…”

Automated Dynamic Assembly of Dependable System Architectures

“…There are a few exceptions (e.g., [2]). Of particular note is the work of Philipps and Rumpe at T. U. Munich [12], who explicitly address the problem of correct architecture refinement and that of Saridakis and Issarny of IRISA [20] on developing dependable architectures by refinement. Neither employs a transformational framework, however.…”