Automated Security Domain Partitioning with a Formal Method Perspective of a Cyber-Physical Systems
Department
Computer Science
Major
Computer Science and Computer Engineering
Research Advisor
Tauritz, Daniel R.
McMillin, Bruce M.
Advisor's Department
Computer Science
Funding Source
Opportunities for Undergraduate Research Experience (OURE)
Abstract
Modern society increasingly relies on the correct functioning of a myriad of interacting Cyber-Physical Systems (CPS) such as water systems, electric power grids, and air traffic control systems. Two critical vulnerabilities pre-sent in these systems are the potential for information leakage and suscep-tibility to deceptive information. The goal of this project is to improve CPS information security by automating the complex task of optimally partition-ing the system into security domains. Automated Theorem Provers are employed to automate testing partition quality. Testing is performed by ex-amining each pairwise connection in a system to determine whether it is Multi-Security Domain Non-Deducibility (MSDND) secure. The performance measure of each partition is then obtained by taking the percentage of con-nections that are MSDND secure. This implies that a higher percentage of secure connections corresponds to a higher performance measure and in turn a better partitioning of a CPS into information flow security domains.
Biography
Mark Myers is a sophomore at Missouri S&T majoring in both computer science and computer engineering. He is an undergraduate research assistant in Dr. McMillin’s Critical Infrastructure Protection Laboratory and Dr. Tauritz’ Natural Computation Laboratory (NC-LAB). During the 2016-2017 academic year, he is enrolled in S&T’s OURE program.
Research Category
Sciences
Presentation Type
Poster Presentation
Document Type
Poster
Location
Upper Atrium/Hall
Presentation Date
11 Apr 2017, 9:00 am - 11:45 am
Automated Security Domain Partitioning with a Formal Method Perspective of a Cyber-Physical Systems
Upper Atrium/Hall
Modern society increasingly relies on the correct functioning of a myriad of interacting Cyber-Physical Systems (CPS) such as water systems, electric power grids, and air traffic control systems. Two critical vulnerabilities pre-sent in these systems are the potential for information leakage and suscep-tibility to deceptive information. The goal of this project is to improve CPS information security by automating the complex task of optimally partition-ing the system into security domains. Automated Theorem Provers are employed to automate testing partition quality. Testing is performed by ex-amining each pairwise connection in a system to determine whether it is Multi-Security Domain Non-Deducibility (MSDND) secure. The performance measure of each partition is then obtained by taking the percentage of con-nections that are MSDND secure. This implies that a higher percentage of secure connections corresponds to a higher performance measure and in turn a better partitioning of a CPS into information flow security domains.
