Abstract
The application of formal methods in secure operating system experiences a procedure of development and maturity with the eminence and development of secure operating system itself. According to Common Criteria and United States Department of Defenses Trusted Computer System Evaluation Criteria (TCSEC), high security level secure operating system should introduce formal methods in the process development and evaluation. Security in Mind Operating System (SECIMOS) is a customizable secure operating system developed by Institute of Software, Chinese Academy of Science. In this work, we formally model the security policies using Z specification language and informally proved the correspondence between policies and top level functionalities. As a result, we summarize the gist to choose a formal description language for modeling a secure operating system and possibility of use Isabelle/HOL as a formal tool.
This work is jointly supported by National Basic Research Program of China (973) under Grant No. G1999035802, National Natural Science Foundation of China under Grant No. 60373054 and National High-Tech Research and Development Program of China (863) under Grant No. 2002AA141080.
This is a preview of subscription content, log in via an institution to check access.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Leveson, N.G.: Geust Editor’s Introduction: Formal Methods in Software Engineering. IEEE Transactions in Software Engineering, 929–931 (September 1990)
Wenzel, M.: Isabelle/Isar - A Versatile Environment for Human-Readable Formal Proof Documents. PhD thesis. Institute für Informatik, Technische Universität München (2002)
Bell, D.E., La Padula, L.J.: Secure Computer System: Unified Exposition and Multics Interpretation. MITRE Report, MTR-2997 Rev.1 (1976)
CSC-STD-001-83, Department of Defense Standard. Department of Defense Trusted Computer System Evaluation Criteria. National Computer Security Center, Ft. Meade, MD. USA (1985)
Waldhart, N.A.: The Army Secure Operating System. In: 1990 IEEE Symposium on Security and Privacy, pp. 50–60 (1990)
Saydjari, O.S.: LOCK: An Historical Perspective. In: 18th Annual Computer Security Applications Conference, pp. 96–108 (2002)
Good, D., Akers, R., Smith, L.: Report on Gypsy 2.05. Tech. Rept. ICSCA-CMP-48. Institute for Computer Science and Computing Applications. The University of Texas at Austin (1986)
Wu, Y., Shi, W., Liang, H., Shang, Q., Yuan, C., Liang, B.: Security On-demand Architecture with Multiple Modules Support. In: Information Security Practice and Experience, First International Conference, Singapore, pp. 121–131 (2005)
Mayer, F.L.: An Interpretation of a Refined Bell-La. Padula Model for the Tmach Kernel. In: Fourth Aerospace Computer Security Applications Conference (1988)
Bell, D.E.: Secure Computer Systems: A Network Interpretation. In: Second Aerospace Computer Security Conference, pp. 32–39 (1986)
Liang, B., Liu, H., Shi, W., Wu, Y.: Enforcing the Principle of Least Privilege with a State-Based Privilege Control Model. In: Information Security Practice and Experience, First International Conference, Singapore, pp. 109–120 (2005)
Spivey, J.M.: Understanding Z: A Spcification language and its formal semantics. Cambridge Tracts in Theoretical Computer Science, vol. 3. Cambridge University Press, Cambridge (1988)
Meisels, I., Saaltink, M.: The Z/EVES Reference Manual (for Version 1.5). Technical Report, TR-97-5492-03d. ORA Canada (1997)
Havelund, K., Lowry, M., Penix, J.: Formal Analysis of A Space Craft Controller Using SPIN. IEEE Transactions on Software Engineering 27(8), 749–765 (2001)
Pecheur, C., Simmons, R.: From Livingstone to SMV: Formal Verification for Autonomous Spacecrafts. In: Proceedings of First Goddard Workshop on Formal Approaches to Agent-Based Systems. NASA Goddard, pp. 103–113 (2000)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Zhou, Z., Liang, B., Jiang, L., Shi, W., He, Y. (2005). A Formal Description of SECIMOS Operating System. In: Gorodetsky, V., Kotenko, I., Skormin, V. (eds) Computer Network Security. MMM-ACNS 2005. Lecture Notes in Computer Science, vol 3685. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11560326_22
Download citation
DOI: https://doi.org/10.1007/11560326_22
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-29113-8
Online ISBN: 978-3-540-31998-6
eBook Packages: Computer ScienceComputer Science (R0)