Dissertation/ Thesis

Abstract Certification of Java Programs in Rewriting Logic

Bibliographic Details
Title: Abstract Certification of Java Programs in Rewriting Logic
Authors: ALBA CASTRO, MAURICIO FERNANDO
Contributors: University/Department: Universitat Politècnica de València. Departamento de Sistemas Informáticos y Computación - Departament de Sistemes Informàtics i Computació
Thesis Advisors: Alpuente Frasnedo, María, Escobar Román, Santiago
Source: Riunet
Subject Terms: Rewriting logic maude, Proof-carrying code pcc, Non-interference, Erasure, Java programs, Certification, Verification, LENGUAJES Y SISTEMAS INFORMATICOS
Description: In this thesis we propose an abstraction based certification technique for Java programs which is based on rewriting logic, a very general logical and semantic framework efficiently implemented in the functional programming language Maude. We focus on safety properties, i.e. properties of a system that are defined in terms of certain events not happening, which we characterize as unreachability problems in rewriting logic. The safety policy is expressed in the style of JML, a standard property specification language for Java modules. In order to provide a decision procedure, we enforce finite-state models of programs by using abstract interpretation. Starting from a specification of the Java semantics written in Maude, we develop an abstraction based, finite-state operational semantics also written in Maude which is appropriate for program verification. As a by-product of the verification based on abstraction, a dependable safety certificate is delivered which consists of a set of rewriting proofs that can be easily checked by the code consumer by using a standard rewriting logic engine. The abstraction based proof-carrying code technique, called JavaPCC, has been implemented and successfully tested on several examples, which demonstrate the feasibility of our approach. We analyse local properties of Java methods: i.e. properties of methods regarding their parameters and results. We also study global confidentiality properties of complete Java classes, by initially considering non--interference and, then, erasure with and without non--interference. Non--interference is a semantic program property that assigns confidentiality levels to data objects and prevents illicit information flows from occurring from high to low security levels. In this thesis, we present a novel security model for global non--interference which approximates non--interference as a safety property.
Description (Translated): Alba Castro, MF. (2011). Abstract Certification of Java Programs in Rewriting Logic [Tesis doctoral no publicada]. Universitat Politècnica de València. doi:10.4995/Thesis/10251/13617.
Palancia
Document Type: Dissertation/Thesis
Language: English
Access URL: http://hdl.handle.net/10251/13617
Rights: Reserva de todos los derechos (NO CC)
Accession Number: edstdx.10803.51826
Database: TDX
FullText Text:
  Availability: 0
CustomLinks:
  – Url: http://hdl.handle.net/10251/13617#
    Name: EDS - TDX (ns324271)
    Category: fullText
    Text: View record in TDX
Header DbId: edstdx
DbLabel: TDX
An: edstdx.10803.51826
RelevancyScore: 1170
AccessLevel: 3
PubType: Dissertation/ Thesis
PubTypeId: dissertation
PreciseRelevancyScore: 1170
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Abstract Certification of Java Programs in Rewriting Logic
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22ALBA+CASTRO%2C+MAURICIO+FERNANDO%22">ALBA CASTRO, MAURICIO FERNANDO</searchLink>
– Name: Author
  Label: Contributors
  Group: Au
  Data: University/Department: Universitat Politècnica de València. Departamento de Sistemas Informáticos y Computación - Departament de Sistemes Informàtics i Computació
– Name: Author
  Label: Thesis Advisors
  Group: Au
  Data: Alpuente Frasnedo, María<br />Escobar Román, Santiago
– Name: TitleSource
  Label: Source
  Group: Src
  Data: Riunet
– Name: Subject
  Label: Subject Terms
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Rewriting+logic+maude%22">Rewriting logic maude</searchLink><br /><searchLink fieldCode="DE" term="%22Proof-carrying+code+pcc%22">Proof-carrying code pcc</searchLink><br /><searchLink fieldCode="DE" term="%22Non-interference%22">Non-interference</searchLink><br /><searchLink fieldCode="DE" term="%22Erasure%22">Erasure</searchLink><br /><searchLink fieldCode="DE" term="%22Java+programs%22">Java programs</searchLink><br /><searchLink fieldCode="DE" term="%22Certification%22">Certification</searchLink><br /><searchLink fieldCode="DE" term="%22Verification%22">Verification</searchLink><br /><searchLink fieldCode="DE" term="%22LENGUAJES+Y+SISTEMAS+INFORMATICOS%22">LENGUAJES Y SISTEMAS INFORMATICOS</searchLink>
– Name: Abstract
  Label: Description
  Group: Ab
  Data: In this thesis we propose an abstraction based certification technique for Java programs which is based on rewriting logic, a very general logical and semantic framework efficiently implemented in the functional programming language Maude. We focus on safety properties, i.e. properties of a system that are defined in terms of certain events not happening, which we characterize as unreachability problems in rewriting logic. The safety policy is expressed in the style of JML, a standard property specification language for Java modules. In order to provide a decision procedure, we enforce finite-state models of programs by using abstract interpretation. Starting from a specification of the Java semantics written in Maude, we develop an abstraction based, finite-state operational semantics also written in Maude which is appropriate for program verification. As a by-product of the verification based on abstraction, a dependable safety certificate is delivered which consists of a set of rewriting proofs that can be easily checked by the code consumer by using a standard rewriting logic engine. The abstraction based proof-carrying code technique, called JavaPCC, has been implemented and successfully tested on several examples, which demonstrate the feasibility of our approach. We analyse local properties of Java methods: i.e. properties of methods regarding their parameters and results. We also study global confidentiality properties of complete Java classes, by initially considering non--interference and, then, erasure with and without non--interference. Non--interference is a semantic program property that assigns confidentiality levels to data objects and prevents illicit information flows from occurring from high to low security levels. In this thesis, we present a novel security model for global non--interference which approximates non--interference as a safety property.
– Name: Abstract
  Label: Description (Translated)
  Group: Ab
  Data: Alba Castro, MF. (2011). Abstract Certification of Java Programs in Rewriting Logic [Tesis doctoral no publicada]. Universitat Politècnica de València. doi:10.4995/Thesis/10251/13617.<br />Palancia
– Name: TypeDocument
  Label: Document Type
  Group: TypDoc
  Data: Dissertation/Thesis
– Name: Language
  Label: Language
  Group: Lang
  Data: English
– Name: URL
  Label: Access URL
  Group: URL
  Data: <link linkTarget="URL" linkTerm="http://hdl.handle.net/10251/13617" linkWindow="_blank">http://hdl.handle.net/10251/13617</link>
– Name: Copyright
  Label: Rights
  Group: Cpyrght
  Data: Reserva de todos los derechos (NO CC)
– Name: AN
  Label: Accession Number
  Group: ID
  Data: edstdx.10803.51826
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=edstdx&AN=edstdx.10803.51826
RecordInfo BibRecord:
  BibEntity:
    Languages:
      – Text: English
    Subjects:
      – SubjectFull: Rewriting logic maude
        Type: general
      – SubjectFull: Proof-carrying code pcc
        Type: general
      – SubjectFull: Non-interference
        Type: general
      – SubjectFull: Erasure
        Type: general
      – SubjectFull: Java programs
        Type: general
      – SubjectFull: Certification
        Type: general
      – SubjectFull: Verification
        Type: general
      – SubjectFull: LENGUAJES Y SISTEMAS INFORMATICOS
        Type: general
    Titles:
      – TitleFull: Abstract Certification of Java Programs in Rewriting Logic
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: ALBA CASTRO, MAURICIO FERNANDO
ResultId 1