System security requirements analysis with answer set programming

Abstract

The need for early consideration of security during system design and development cannot be over-emphasized, since this allows security features to be properly integrated into the system rather than added as patches later on. A necessary pre-requisite is the elicitation and analysis of the security requirements prior to system design. Existing methods for the security requirements phase, such as attack trees and misuse case analysis, use manual means for analysis, with which it is difficult to validate and analyse system properties exhaustively. We present a computational solution to this problem using an institutional (also called normative) specification to capture the requirements in the InstAL action language, which in turn is implemented in answer set programming (a kind of logic programming language). The result of solving the answer set program with respect to a set of events is a set of traces that capture the evolution of the model over time (as defined by the occurrence of events). Verification is achieved by querying the traces for specific system properties. Using a simple scenario, we show how any state of the system can be verified with respect to the events that brought about that state. We also demonstrate how the same traces enable: (i) identification of possible times and causes of security breaches and (ii) establishment of possible consequences of security violations.

InstAL: An Institutional Action Language

“…3. Bibu et al [7] and Pieters et al [31] use normative specifications to explore and to establish security properties. 4.…”

“…pyinstql is available from http://www.cs.bath.ac.uk/instal 6 pyviz is available from http://www.cs.bath.ac.uk/instal7 The Bath Sensor Framework provides distributed communications through the use of a XMPP server and is available from https://github.com/mas-at-bath/bsf…”

On requirements representation and reasoning using answer set programming

“…The query program is an arbitrary AnsProlog program, which is used to validate the model against its requirements by checking properties such as: (i) whether events occur in certain sequences or not and (ii) the presence or absence of state traces (answer sets) that satisfy certain conditions. InstAL has been used in this way for contract analysis [32], [25], security requirements [33], [34] and wireless network management [35].…”