Observation Based System Security

Issue title: Special Issue on Concurrency Specification and Programming (CS&P)

Article type: Research Article

Authors: Gruska, Damas P.

Affiliations: Institute of Informatics Comenius University Mlynska dolina, 842 48 Bratislava, Slovakia. E-mail: gruska@fmph.uniba.sk

Abstract: A formal model for description of passive and active timing attacks is presented, studied and compared with other security concepts. It is based on a timed process algebra and on a concept of observations which make only a part of system behaviour visible. From this partial information which contains also timing of actions an intruder tries to deduce some private system activities.

Keywords: process algebras, timing attacks, information flow

Journal: Fundamenta Informaticae, vol. 79, no. 3-4, pp. 335-346, 2007