Fraunhofer-Gesellschaft

Publica

Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

Component-Based Refinement and Verification of Information-Flow Security Policies for Cyber-Physical Microservice Architectures

 
: Gerking, C.; Schubert, D.

:

IEEE International Conference on Software Architecture, ICSA 2019. Proceedings : 25-29 March 2019, Hamburg, Germany
Piscataway, NJ: IEEE, 2019
ISBN: 978-1-7281-0528-4
ISBN: 978-1-7281-0529-1
pp.61-70
International Conference on Software Architecture (ICSA) <16, 2019, Hamburg>
Bundesministerium für Bildung und Forschung BMBF (Deutschland)
01IS16047I
English
Conference Paper
Fraunhofer IEM ()

Abstract
Since cyber-physical systems are inherently vulnerable to information leaks, software architects need to reason about security policies to define desired and undesired information flow through a system. The microservice architectural style requires the architects to refine a macro-level security policy into micro-level policies for individual microservices. However, when policies are refined in an ill-formed way, information leaks can emerge on composition of microservices. Related approaches to prevent such leaks do not take into account characteristics of cyber-physical systems like real-time behavior or message passing communication. In this paper, we enable the refinement and verification of information-flow security policies for cyber-physical microservice architectures. We provide architects with a set of well-formedness rules for refining a macro-level policy in a way that enforces its security restrictions. Based on the resulting micro-level policies, we present a verification technique to check if the real-time message passing of microservices is secure. In combination, our contributions prevent information leaks from emerging on composition. We evaluate the accuracy of our approach using an extension of the CoCoME case study.

: http://publica.fraunhofer.de/documents/N-569256.html