Abstract
Deeply embedded infrastructures are pervasive systems that have significant cyber and physical components, interacting with each other in complex ways. These interactions can violate a system's security policy leading to unintended information flow. Execution Monitor (EM) enforceability is the concept of monitoring a system during runtime for any security policy violations and terminating the execution if such violations occur. EM enforceable mechanisms require that the properties being enforced be restricted to safety properties. Information flow properties are considered non-EM enforceable because they cannot be defined using safety properties. to bridge this gap, prior work has presented a monitor that predicts future possible events, then evaluates these as safety properties. Unfortunately, in a pervasive system, evaluating future possible events results in a physical, observable, change to the system. What is needed is a physical "undo" operation in which a physical setting can be explored, then undone in a way that no unintended information flow results. This paper presents the concepts of compensating events and a compensating couple which can be used to EM enforce information flow properties in pervasive systems. © 2009 IEEE.
Recommended Citation
T. T. Gamage and B. M. McMillin, "EM Enforcing Information Flow Properties using Compensating Events," Proceedings of the 42nd Annual Hawaii International Conference on System Sciences, HICSS, article no. 4755796, Institute of Electrical and Electronics Engineers, Apr 2009.
The definitive version is available at https://doi.org/10.1109/HICSS.2009.181
Department(s)
Computer Science
International Standard Book Number (ISBN)
978-076953450-3
Document Type
Article - Conference proceedings
Document Version
Citation
File Type
text
Language(s)
English
Rights
© 2024 Institute of Electrical and Electronics Engineers, All rights reserved.
Publication Date
03 Apr 2009
