检索结果-南通市图书馆

Frontiers of Computer Science 2017年第4期11卷 585-607页

作者： Yongwang ZHAO Zhibin YANG Dianfu MA State Key Laboratory of Software Development Environment (NLSDE) School of Computer Science and Engineering Beihang Univerisity Beijing 100191 China College of Computer Science and Technology Nanjing University of Aeronautics and Astronautics Nanjing 210016 China Collaborative Innovation Center of Novel Software Technology and Industrialization Nanjing 210016 China

Abstract Separation kernels are fundamental software of safety and security-critical systems, which provide their hosted applications with spatial and temporal separation as well as controlled information flows among partitions. The application of separation kernels in critical domain demands the correctness of the kernel by formal verification. To the best of our knowledge, there is no survey paper on this topic. This paper presents an overview of formal specification and verification of separation kernels. We first present the back- ground including the concept of separation kernel and the comparisons among different kernels. Then, we survey the state of the art on this topic since 2000. Finally, we summa- rize research work by detailed comparison and discussion.

关键词： real-time operating systems separation kernel,survey formal specification formal verification

Hybrid formal verification of CSTR System Based on MLD Model

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Hybrid Formal Verification of CSTR System Based on MLD Model

Safety Protection Analysis with formal verification for Process Control System Under Cyberattacks

2011 Chinese Control and Decision Conference（CCDC）

作者： Yuhong Wang is associate professor with College of Information and Control Engineering,China University of Petroleum,Dongying,257061 China.Huayi Liu is with College of Information and Control Engineering,China University of Petroleum,Dongying,257061 China Di Lu is with College of Information and Control Engineering,China University of Petroleum,Dongying,257061,China

The operation safety problems in process industry are becoming more and more *** on Mixed Logical Dynamical （MLD） model,operation safety problems are converted into hybrid formal verification problems in this *** hybrid formal verification algorithm is applied to a CSTR process with serious *** defining safety states as reach set,the CSTR process is modeled in the MLD *** operation safety problems of CSTR can be transformed into hybrid formal verification *** safety reach sets are computed by MPT *** results show that CSTR process can be driven to safety reach sets with proper control action calculated using hybrid formal verification *** paper illustrates the effectiveness of this hybrid formal verification method and provides a novel approach to handle operation safety problems in process industry.

关键词： formal verification Hybrid System MLD Model CSTR

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

Safety Protection Analysis with Formal Verification for Proc...

A formal Method for Service Choreography verification Based on Description Logic

第35届中国过程控制会议

作者： Xuqing Liang Chunjie Zhou Yu-Chu Tian Xin Du Peihang Xu School of Artificial Intelligence and Automation Huazhong University of Science and Technology The Key Laboratory of Image Processing and Intelligent Control Ministry of Education School of Computer Science Queensland University of Technology

The safety protection of process control systems plays a crucial role in the overall safety of critical *** have increased the complexity of existing safety protection analysis. Traditional safety analysis methods fall short in accounting for cyberattack factors, making it challenging to conduct safety protection analysis under cyberattacks. To address this issue, this paper presents a new safety protection analysis method that considers multiple safety factors explicitly including cyberattacks using formal verification. The method consists of three main components: exhaustive system safety specifications,formal models, and system safety validation. The system safety specification component adds a cyberattack factor to system safety requirements based on the system theory process analysis(STPA) method. The formal model component considers the system's dynamic operation process, and safety protection behaviors under typical attack behaviors. The system safety validation component validates the effectiveness of system safety protection under cyberattacks by the UPPAAL tool, from the perspective of whether system safety constraints are triggered and whether the change curve of process variables is compliant. Finally, the effectiveness of the presented approach is carried out for a simplified fluid catalytic cracking(FCC) fractionating system.

关键词： Safety protection analysis formal verification Cyberattacks System theory process analysis(STPA)

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2020年第2期62卷 893-904页

作者： Tingting Zhang Yushi Lan Minggang Yu Changyou Zheng Kun Liu PLA Army Engineering University NanjingChina The 28th Research Institute of China Electronics Technology Group Corporation NanjingChina Southeast University NanjingChina

Web Services Choreography Description Language lacks a formal system to accurately express the semantics of service behaviors and verify the correctness of a service choreography *** paper presents a new approach of choreography model verification based on Description Logic.A meta model of service choreography is built to provide a conceptual framework to capture the formal syntax and semantics of service *** on the framework,a set of rules and constraints are defined in Description Logic for choreography model *** automate model verification,the UML-based service choreography model will be transformed,by the given algorithms,into the DL-based ontology,and thus the model properties can be verified by reasoning through the ontology with the help of a popular DL reasoned.A case study is given to demonstrate applicability of the ***,the work will be compared with other related research.

关键词： Service choreography WS-CDL meta-concept model description logic formal verification

Design and verification of a lightweight reliable virtual machine monitor for a many-core architecture

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Frontiers of Computer Science 2013年第1期7卷 34-43页

作者： Yuehua DAI Yi SHI Yong QI Jianbao REN Peijian WANG School of Electronic and Information Engineering Xi'an Jiaotong University Xi' an 710049 China

Virtual machine monitors （VMMs） play a central role in cloud computing. Their reliability and availability are critical for cloud computing. Virtualization and device emu- lation make the VMM code base large and the interface be- tween OS and VMM complex. This results in a code base that is very hard to verify the security of the VMM. For exam- ple, a misuse of a VMM hyper-call by a malicious guest OS can corrupt the whole VMM. The complexity of the VMM also makes it hard to formally verify the correctness of the system＇s behavior. In this paper a new VMM, operating sys- tem virtualization （OSV）, is proposed. The multiprocessor boot interface and memory configuration interface are virtu- alized in OSV at boot time in the Linux kernel. After booting, only inter-processor interrupt operations are intercepted by OSV, which makes the interface between OSV and OS sim- ple. The interface is verified using formal model checking, which ensures a malicious OS cannot attack OSV through the interface. Currently, OSV is implemented based on the AMD Opteron multi-core server architecture. Evaluation re- sults show that Linux running on OSV has a similar perfor- mance to native Linux. OSV has a performance improvement of 4%-13% over Xen.

关键词： virtual machine monitor model operating sys tem many core formal verification

verification of Authentication Protocols for Epistemic Goals via SAT Compilation

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2006年第6期21卷 932-943页

作者：苏开乐陈清亮 Abdul Sattar 岳伟亚吕关锋郑锡忠 Department of Computer Science Sun Yat-Sen University Guangzhou 510275 P.R China Institute for Integrated and Intelligent Systems Griffth University Brisbane Qld 4111 Australia College of Computer Science and Technology Beijing University of Technology Beijing 100022 P.R. China Department of Computer Science Brandenburg University of Technology Cottbus 03036 Germany

This paper introduces a new methodology for epistemic logic, to analyze communication protocols that uses knowledge structures, a specific form of Kripke semantics over hostile networks. The paper particularly focuses on automatic verification of authentication protocols. Our approach is based on the actual definitions of a protocol, not on some difficultto-establish justifications. The proposed methodology is different from many previous approaches to automatic verification of security protocols in that it is justification-oriented instead of falsification-oriented, i.e., finding bugs in a protocol. The main idea is based on observations： separating a principal executing a run of protocol from the role in the protocol, and inferring a principal＇s knowledge from the local observations of the principal. And we show analytically and empirically that this model can be easily reduced to Satisfiability （SAT） problem and efficiently implemented by a modern SAT solver.

关键词： authentication protocol formal verification knowledge structure SAT

Refinement modeling and verification of secure operating systems for communication in digital twins

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Digital Communications and Networks 2024年第2期10卷 304-314页

作者： Zhenjiang Qian Gaofei Sun Xiaoshuang Xing Gaurav Dhiman School of Computer Science and Engineering Changshu Institute of TechnologySuzhou215500China University Centre for Research and Development Department of Computer Science and EngineeringChandigarh UniversityMohali140413India Department of Computer Science and Engineering Graphic Era Deemed to be UniversityDehradun248002India

In traditional digital twin communication system testing,we can apply test cases as completely as possible in order to ensure the correctness of the system implementation,and even then,there is no guarantee that the digital twin communication system implementation is completely *** verification is currently recognized as a method to ensure the correctness of software system for communication in digital twins because it uses rigorous mathematical methods to verify the correctness of systems for communication in digital twins and can effectively help system designers determine whether the system is designed and implemented *** this paper,we use the interactive theorem proving tool Isabelle/HOL to construct the formal model of the X86 architecture,and to model the related assembly *** verification result shows that the system states obtained after the operations of relevant assembly instructions is consistent with the expected states,indicating that the system meets the design expectations.

关键词： Theorem proving Isabelle/HOL formal verification System modeling Correctness verification

verification of Real Time Operating System Exception Management Based on SPARCv8

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2021年第6期36卷 1367-1387页

作者： Zhi Ma Lei Qiao Meng-Fei Yang Shao-Feng Li Jin-Kun Zhang Beijing Institute of Control Engineering Beijing 100190China China Academy of Space Technology Beijing 100094China School of Computer Science and Technology Xidian UniversityXi'an 710071China

Exception management,as the lowest level function module of the operating system,is responsible for making abrupt changes in the control flow to react to exception events in the *** correctness of the exception management is crucial to guaranteeing the safety of the whole ***,existing formal verification projects have not fully considered the issues of exceptions at the assembly *** for real-time operating systems,in addition to basic exception handling,there are nested exceptions and task switching by exceptions service *** our previous work,we used high-level abstraction to describe the basic elements of the exception management and verified correctness only at the requirement *** on earlier work,this paper proposes EMS(Exception Management SPARCv8),a practical Hoare-style program framework to verify the exception management based on SPARCv8(Scalable Processor Architecture Version 8)at the design *** framework describes the low-level details of the machine,such as registers and memory *** divides the execution logic of the exception management into six phases for comprehensive formal *** the executing scenario of the real-time operating system SpaceOS on the Beidou-3 satellite as an example,we use the EMS framework to verify the exception *** the formalization and proofs are implemented in the interactive theorem prover Coq.

关键词： operating system exception Scalable Processor Architecture Version 8(SPARCv8) Coq formal verification

Distributed Information Flow verification for Secure Service Composition in Smart Sensor Network

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

China Communications 2016年第4期13卷 119-130页

作者： XI Ning SUN Cong MA Jianfeng CHEN Xiaofeng SHEN Yulong Shaanxi Key Laboratory of Network and System Security XIDIAN University School of Cyber Engineering XIDIAN University

Accelerate processor, efficient software and pervasive connections provide sensor nodes with more powerful computation and storage ability, which can offer various services to user. Based on these atomic services, different sensor nodes can cooperate and compose with each other to complete more complicated tasks for user. However, because of the regional characteristic of sensor nodes, merging data with different sensitivities become a primary requirement to the composite services, and information flow security should be intensively considered during service composition. In order to mitigate the great cost caused by the complexity of modeling and the heavy load of single-node verification to the energy-limited sensor node, in this paper, we propose a new distributed verification framework to enforce information flow security on composite services of smart sensor network. We analyze the information flows in composite services and specify security constraints for each service participant. Then we propose an algorithm over the distributed verification framework involving each sensor node to participate in the composite service verification based on the security constraints. The experimental results indicate that our approach can reduce the cost of verification and provide a better load balance.

关键词： information flow security service composition formal verification smart sensor network