Non-interference Model Research Articles

A Noninterference Model for Mobile OS Information Flow Control and Its Policy Verification

Mobile operating systems such as Android are facing serious security risk. First, they have a large number of users and store a large number of users’ private data, which have become major targets of network attack; second, their openness leads to high security risks; third, their coarse-grained static permission control mechanism leads to a large number of privacy leaks. Recent decentralized information flow control (DIFC) operating systems such as Asbestos, HiStar, and Flume dynamically adjust the label of each process. Asbestos contains inherent covert channels due to this implicit label adjustment. The others close these covert channels through the use of explicit label change, but this impedes communication and increases performance overhead. We present an enhanced implicit label change model (EILCM) for mobile operating systems that can close the known covert channel in these models with implicit label change and supports dynamic constraints on tags for separation of duty. We also formally analyze the reasons why EILCM can close the known covert channels and prove that abstract EILCM systems have the security property of noninterference with declassification by virtue of the model checker tool FDR. We also prove that the problem of EILCM policy verification is NP-complete and propose a backtrack-based search algorithm to solve the problem. Experiments are presented to show that the algorithm is effective.

Simulation of Dynamic User Network Connection Anti-Interference and Security Authentication Method Based on Ubiquitous Internet of Things

Ubiquitous Internet of Things includes criteria, applications, and technologies for providing standard data. The system can be used to establish a comprehensive data database to facilitate people to better analyze, organize, and use these data, so as to improve the reliability and sharing of data, to provide better services for users. The purpose of this study is to propose and establish a specific and reliable data exchange program to ensure the security of data exchange. Data security is to ensure the reliability of specific security exchange process. The emphasis of this study is the reliability analysis method and the verification method of exchange process behavior. Based on the analysis of all abnormal phenomena in the Internet of Things traffic, the basic characteristics of network traffic, the basic properties of network traffic, and the theory of multiterminal power communication network anti-interference model construction and noninterference model, the simulation experiment of anti-interference and security authentication method is carried out. The results show that, with the increase of the number of antennas, the false detection probability decreases from 10−1 to 10−4, which can achieve better performance in the detection of active users. When network is used in applications, HTTP + SSL is the most widely used application for data authentication and security authentication. The market of anti-interference technology is developing rapidly. The complex annual growth rate almost doubled in the international market, and the market scale was significantly expanded, with an annual growth rate of about 50%.

Religious Rights and Involuntary State Institutions in Democratic Countries: On Evenhandedness and Ecumenism in Militaries

Militaries present a difficult challenge for scholars interested in navigating the complex demands of religious liberty and religion-state relations. The reason is that the most familiar features of religion-state relations in liberal countries—governmental non-interference and the structure of religious associations as voluntary associations—are incompatible with the structure of militaries as involuntary organizations that are nonetheless highly important institutions in even liberal-democratic countries. How should scholars accustomed to the liberal framework going back to Locke, hence, theorize the desirable religious-institutional state of affairs within involuntary institutions such as militaries? As the governmental non-interference model is inadequate, the argument to be presented here is that the involuntary nature of militaries presents the liberal-minded theorist, with unusual dilemmas, and hence would make two models most adequate for a religious-institutional state of affairs within militaries: evenhandedness (or multiple establishments) and ecumenism, a somewhat unusual category.

Harmonic Response of Power Coupling Mechanism of Coastal Ship

ABSTRACT Yuan, L., 2018. Harmonic response of power coupling mechanism of coastal ship. In: Liu, Z.L. and Mi, C. (eds.), Advances in Sustainable Port and Ocean Engineering. Journal of Coastal Research, Special Issue No. 83, pp. 86–92. Coconut Creek (Florida), ISSN 0749-020 8. A non-interference simulation model of the coupling mechanism of a heavy-duty hybrid vehicle is established. Based on the characteristics of periodic input, the dynamic response of the power coupling mechanism under the rated torque is analyzed by finite element method, and the key components are obtained. The results show that the excitation force of the planet carrier at about 2000 Hz will cause the planetary wheel to bend and axial deformation, as the planetary gear and the planetary carrier optimization design provides a theoretical basis.

Distributed multilevel security core architecture based on noninterference theory

To improve the correctness and feasibility of the implementation of multilevel security in the distributed environment,a distributed multilevel security core architecture — Distributed Trusted Computing Base(DTCB) was proposed.DTCB was divided into three layers,TCB of System layer,TCB of Module layer and TCB of Partition layer,finer multilevel control granularity was realized step by step,greatly reducing the complexity of the implementation of multilevel security in the distributed environment.At last,based on the composable noninterference model,the security of DTCB was formally proved.The result shows that DTCB assures the multilevel security of distributed system as a whole.

An Extended Non-Interference Security Model (ENISM) and Its CSP-Based Description and Verification Method

Based on the theory of non-interference,this paper proposes an extended non-interference security model ENISM,for the purpose of specification and analysis of information flow policies in operating systems.This paper includes the following works: firstly,system modules would be recognized as domains,and the traces set which contains traces may be implemented after a system state and the data values set at the state are two most important analysis gist for defining the secure states in ENISM.Secondly,the sufficient conditions ENISM-CC are proposed on which unsafe traces and data flow is not existed.Thirdly,this paper gives out a formal description method for system design and describes the semantic ENISM-CC based on the Communicating Sequential Processes CSP.

A Formal Method Based on Noninterference for Analyzing Trust Chain of Trusted Computing Platform

The integrity measurement of TCG can only insure that the components of a computing platform are tamper-proofed,which is not enough for avoiding the interference between components at runtime for building the trust chain.The interference of other components results in the unexpected information flow.The trust model of Trusted Computing Platform is analyzed in this paper.Based on the intransitive noninterference model,a formal method of analyzing the trust chain transfer is proposed.It formalized specifies the security policy isolating the interference between components that can make the trust chain valid after integrity measurement.

A Noninterference Model for Nondeterministic Systems

The noninterference concept for actions of system to information domains is proposed. On the basis of this concept, the noninterference model is extended to nondeterministic systems. The noninterference concept based on actions of system simplifies the purge of the action sequence of the system. As a result, this model has concise unwinding conditions which are easy to understand and use. The extended model can be used to verify not only static but also dynamic information flow policies. Finally, a dynamic label based access control model is designed, in which the concrete semantic of the actions such as read, write and execute are defined, and its security is verified

Non-interference models and subliminal channels

AbstractWe consider mathematical models of secure systems, namely, the traditional noninterference model and a probabilistic non-interference model. We demonstrate that a system can satisfy the conditions of the traditional non-interference model in presence of a subliminal channel from the high-security domain to the low-security one. We give a sufficient condition for absence of a system of subliminal channels in the automaton model.

An Experience Using Two Covert Channel Analysis Techniques on a Real System Design

This paper examines the application of two covert channel analysis techniques to a high level design for a real system, the Honeywell Secure Ada® Target (SAT). The techniques used were a version of the noninterference model of multilevel security due to Goguen and Meseguer and the shared resource matrix method of Kemmerer. Both techniques were applied to the Gypsy Abstract Model of the SAT. The paper discusses the application of the techniques and the nature of the covert channels discovered. The relative strengths and weaknesses of the two methods are discussed and criteria for an ideal covert channel tool are developed.

Statistical Analysis of Multilocus Recombination

A general formula for the frequency of different recombinant gamete types, in terms of the underlying distribution of crossovers, is derived. This formula may be applied to any theoretical model of recombination in which it is assumed that there is no chromatid interference. Multiple-locus recombination data may be evaluated by using this formula in conjunction with a maximum likelihood procedure. The validity of any model of recombination may be tested in such a fashion. The possibilities are demonstrated through application to a generalized noninterference model of crossing over described in a previous paper (Risch and Lange, 1979, Annals of Human Genetics 43, 61-70).