Information flow control by construction for component models

  • Context: Confidentiality is often ensured using the formalization of non-interference and information flow. This formalization is already used to analyze breaches of confidentiality for instance by using a security type system. Furthermore, there exists constructive methods to building programs and algorithms. But there are still no constructive methods applied to the software architectural level which allows building larger systems.

     

    Goal: Investigate how to use constructive methods to ensure confidentiality and non-interference in component-models where components might keep an internal state or communicate asynchronously.

     

    Requirements: Basic knowledge of UML and component models.