Analysing the Information Flow Properties of Object-Capability Patterns

We consider the problem of detecting covert channels within security-enforcing object-capability patterns. Traditional formalisms for reasoning about the security properties of object-capability patterns require one to be aware, a priori, of all possible mechanisms for covert information flow that might be present within a pattern, in order to detect covert channels within it. We show how the CSP process algebra, and its model-checker FDR, can be applied to overcome this limitation.

• Type: Conference
• Year: 2009
• Where: IFIP
• Authors: Toby C. Murray, Gavin Lowe
• Keywords: Communications, Covert Channels, IFIP 2009, Object-capability Patterns, Security-enforcing Object-capability Patterns