Work

Compositional Security Analysis of Dynamic Component-based Systems

Year: 2024

Type: conference-paper

Abstract: To reason about and enforce security in dynamic software systems, automated analysis and verification approaches are required. However, such approaches often encounter scalability issues, particularly when employed for runtime analysis, which is necessary in software systems with dynamically changing architectures, such as self-adaptive systems. In this work, we propose an automated formal approach for security analysis of component-based systems with dynamic architectures. This approach leverages formal abstraction and incremental analysis techniques to reduce the complexity of runtime analysis. We have implemented and evaluated our approach against ZNN, a widely known self-adaptive system exemplar. Our experimental results demonstrate the effectiveness of our approach in addressing scalability issues.

Source: IEEE/ACM International Conference on Automated Software Engineering (ASE)

DOI: 10.1145/3691620.3695499

Authors: Narges Khakpour, Charilaos Skandylas

Institutions: Linnaeus University, Newcastle University, Linköping University

Language: English

Topic: Advanced Software Engineering Methodologies

Subfield: Artificial Intelligence

Field: Computer Science

Domain: Physical Sciences

Open Access status: hybrid

Funder: Engineering and Physical Sciences Research Council

Award: G5595371494