P U B L I C A T I O N I N T E R N E No

Description

Niveau: Supérieur
I R I S A IN ST IT U T D E R EC HE RC HE EN IN FO RM AT IQ UE ET SY ST ÈM ES ALÉ ATO IRE S P U B L I C A T I O N I N T E R N E No I R I S A CAMPUS UNIVERSITAIRE DE BEAULIEU - 35042 RENNES CEDEX - FRANCEIS SN 1 16 6- 86 87 1901 MONITORING INFORMATION FLOW BY DIAGNOSIS TECHNIQUES JÉRÉMY DUBREIL, THIERRY JÉRON, HERVÉ MARCHAND

• déte tion en ligne


• tion


• dete ting


• partial observation


• centre national de la recherche scientifique


• atta ker

Sujets

• Université de Rennes
• Centre national de la recherche scientifique

Informations

• Publié par: chaeh
• Nombre de lectures: 13
• Langue: English

Extrait

P U B L I C A T I O N
I N T E R N E
o 1901N
MONITORING INFORMATION FLOW BY DIAGNOSIS TECHNIQUES
J?R?MY DUBREIL, THIERRY J?RON, HERV? MARCHAND
I R I S A
CAMPUS UNIVERSITAIRE DE BEAULIEU - 35042 RENNES CEDEX - FRANCE
A

S
E
R
I
O
T
A
É
L
A

SS
E
M
È
T
Y
S

T
E

E
U
Q
II
T
A
M
R
O
F
N
I

N
E

E
H
CR
E
H
C
E


E
D

T
U
T
I
T
SI
N
I
ISSN 1166-8687INSTITUT DE RECHERCHE EN INFORMATIQUE ET SYST¨MES AL ATOIRES
Campus de Beaulieu – 35042 Rennes Cedex – France
Tél. : [phone] – Fax : [phone]
http://www.irisa.fr
Centre National de la Recherche Scientifique Institut National de Recherche en Informatique
(UMR 6074) Université de Rennes 1 – Insa de Rennes et en Automatique – unité de recherche de Rennes
hniq

b
k

er
mes
to

infer
tereste
the
Pu

J?r
b
n
eha
ev
viors.
of
W
t
e


s
the

general
u

ation
where
where
the
.

obser
k
o
er
monitors
and
w
the
a
administrator

ha
in
v
V
e
n
dieren
y
t
v
partial
l
views
r?
of
y
the
g
system.

F
the
urther,
e
based
t
on
able
the
of
diagnosis
in
of
tial
discrete
the
ev
in
en
are
t
pap
systems,
:
w
t
e
pages
pro
gust
vide
n


and
e
su
ro
cien
an
t
omm

t
under
d
whic
M
h
n,

T
and
e
prediction
y
of
J

sis
information
w
o
for
w
to

M
b
the
e

ensured
on
and
fo
a
W

systems
of
en
a
discrete
monitor
v
ensuring
partially
this
text
task.
the
K
w
e
information
y

-

w
for
or

ds:
d

in
y
e
,
er,
opacit
his
y
In
,

discrete
r
ev
s
en
A
t
15
systems,
2008
partial
Au
observ
1901
ation,
terne
diagnosis,
n
on
b
-line
Cs

erT
tion.
jets
(
P
R
t
?
ic
s
u
u

m?
?
:
s
ts
S
v
han
p
ar
)
?
wing
Her
allo
o
ations
hierry
observ
,
of
i
set
br
the
D
ze
m

?

ues
an
ec
T
e
Diagno
W
b
language.
o
regular
m
a
In
as
rin
en
i
giv
o
is
information
rstp
Su

p
tes
er

vision
diagnostic
de
d'information
fuites
en
d
et
'information
du
via
discrets,
des
la

un
hniques
?nemen
de
l
diagnostic
g?n?ral
R
t
?s
n
u
les
m?
?
:

Nous
p
nous
pr?diction
in
moniteur
t

?ressons
opacit?,
?
ation
la


.
de
le
moniteurs
l'attaquan
p
r
ermettan
vues
t
tiellem
de
di?ren

nous
la
hniques
fuite
des
d
?nemen
'information
explicitons

et
tiel
le
l
p
e
et/ou
p

our

des
ermettan
syst?mes
d'assurer
partielleme

n
:
t
?
observ
discrets,
ables,
diagnostic,
mo
l'information
d?lis?s
tiel
par
e
des
Ensuite,
syst?mes
t
de

transition
o?
nis.
t
Nous
l'administrateu

on
le
des

partielles
o?
oten
le
e

t
p
tes
eut
syst?me,
se
adaptons
mo

d?liser
de
par
sur
des
syst?mes
langages
?v
r?guliers.
t
Nous
nous

des
?ons

par
susan
d?nir
sur
la
syst?me
notion
our
d'opacit?
ermettre
p

our
la
formaliser
de
la
fuite
fuite
et
d'information
un
et
p

t
l'ensem
administrateur
ble

des
Nous
observ
Mots
ations
l?s
p

our
syst?mes
les
?v
quelles
ts
un
observ
attaquan
partielle,
t

inf?re
ligne
deG A
M
G
G ΠA
Π ΠM A
Monitor Attacker
M A
ϕ
Σ G
ϕ
Π AA
M
G A
M M
G ΠA
ΠM
M
some

allo
in
monitor
terest
(C.f.
in


the
h
throughout
ab
onding
out
a

in

has
y
the
in
b
the
prop
past
nite

1
Indeed,
℄
the
et
emergence
the
of
the
w
and
eb
o
services
the
and
een
the
and
impro
follo
v
monitor
emen
9
ts
system
of
through
the
tro
p

ossibilities
F
of
℄
mobile
a
and

em
prop
b
on
edded

systems

allo
w
w
to
lots
try
of
kno
new
the
and
k
in
not
teresting
urther,
features.
the
But
and
some

of
the
these
e
services
of

notion
h
in
as
e
online
deled
pa
in
ymen
has
t,
of

s
information
hni
storage
system,
or
t
e-v

oting
and
system
mo
ma

y
v
deal
system
with
as
some
surely

is
information.
of
In
p
the
.
mean
observ
time,
b
ha
ontr
ving
analyze
more
een
applications
er
and
whenev

ealed.
for
information

e
these
o
services
(i.e.
also
the

rin
the
es
p
i
ossibilities
link
for
o

set
h
k
information
e
to
under
o
information
w.

T

o
2,
a
terminology
v
In
oid
w

of
y
to

In
h,
P
using
or


to
1).
ols
that
based
is
on
y
formal
system.
metho
with
ds
in
for
,

the
y
system.
analysis
S

m
b
ues
e
1:
b
or


In
tial
this
p

wing
text,
of
there
the
has
,
b

een
b
a
ert
gro
en
wing
language
in
the
terest
of
in
.
v
preserv

as
[3
er
,
that
10
y
℄
b
and
t
testing
system
of
observ

through
y
Diagno
prop
e
erties
set
[5
allo
℄
k
and
infer
monitoring
A

,
y
tries
prop
information
erties
et
[12
system
℄

in
in
past
an
y
the
ears.
een
In

order
predict
to
w.
sp
so,
ecify
that

the
h
er

k
analysis
kno
metho
del
ds,
In

terface
y
the
prop
He
erties
system
are
terface
generally
e
separated
an
in
et
to
t
three
terfaces).
dieren
on
t
observ

the
:
to
a
information,
vai
vide
lability
t
(a
h
user
of

w
alw
ensured,
a
monitor
ys
the
p
is
erform
In
the
e
actions
a
that
notions
are
pap
allo
3,
w
w
ed
build
b

y
sup
the
system

giv
y
y
p
dene
olicy
opacit
),
n
inte
system
grity
an
(something
trusion
illegal
system)

Figure
b
W
e
assume
p
the
erformed
een
b
mo
y
b
a
a
user)
transition
an