Self-adaptation and secure information flow in multiparty communications

Abstract

Abstract. We present a comprehensive model of structured communications in which self-adaptation and security concerns are jointly addressed. More specifically, we propose a model of multiparty, self-adaptive communications with access control and secure information flow guarantees. In our model, multiparty protocols (choreographies) are described as global types; security violations occur when process implementations of protocol participants attempt to read or write messages of inappropriate security levels within directed exchanges. Such violations trigger adaptation mechanisms that prevent the violations to occur and/or to propagate their effect in the choreography. Our model is equipped with local and global adaptation mechanisms for reacting to security violations of different gravity; type soundness results ensure that the overall multiparty protocol is still correctly executed while the system adapts itself to preserve the participants' security.

Discourje: Runtime Verification of Communication Protocols in Clojure

“…Expressiveness issues of multiparty session types (MPST) have received some attention, but efforts have primarily been geared towards adding more advanced features (e.g., time [5,36], security [7,8,9,13], and parametrisation [14,20,39]); in contrast, restrictions on the usage of core features like choice and interleaving have remained, even though they limit MPST's applicability in practice (e.g., our Tic-Tac-Toe specification cannot be expressed; Fig. 5).…”

Causally consistent reversible choreographies

“…Figure 9 reports a very simple system for decreeing wellformedness. It is inspired by the type system for processes defined in [4]; clearly, more sophisticated systems, such as variants of those in [19,13], can be considered. We rely on two judgments:…”

Data-driven adaptation for smart sessions

“…Works addressing adaptation for multiparty communications include [14], [15], [16], [17] and [18]. In the paper [14] global and session types are used to guarantee deadlockfreedom in a calculus of multiparty sessions with asynchronous communications.…”

“…The adaptive system is composed by interacting participants deployed on different locations, each executing its own code. The calculus of [17] is inspired by [4], the main difference being that security violations trigger adaptation mechanisms that prevent violations to occur and/or to propagate their effect in the systems. An event based approach is proposed in [18].…”