paperbot · PL 论文追踪

全部论文 待读 收藏

P2 Compositional Security Analysis of Dynamic Component-based Systems

基于组件的动态系统的组合式安全分析
ASE Proceedings of the 39th IEEE/ACM International Conference on Automated Software Engineering2024匹配度 3/10 · 论文属于形式化分析与抽象解释方向,与用户对程序分析/形式化验证的广义兴趣有弱关联;但其核心是动态组件系统的安全分析与运行时可扩展性,未涉及 LLM/Agent、机器学习系统、浮点程序分析或贝叶斯程序分析等用户重点关注的交叉方向。引用 2 inbox
Narges Khakpour, Charilaos Skandylas
crossref: 2026-09-12

AI 速览

一句话:提出一种面向动态架构组件系统的自动化形式化安全分析方法,通过抽象与增量分析提升运行时可扩展性。

动态软件系统(如自适应系统)的体系结构在运行时会发生变化,为推理并强制安全策略,需要自动化的分析与验证,但现有方法在运行时分析中常面临可扩展性瓶颈。本文提出一种自动化的形式化方法,用于分析具有动态架构的基于组件的系统安全性质。该方法利用形式抽象与增量分析技术降低运行时分析的复杂度,从而支持体系结构动态变化下的组合式安全推理。作者实现了原型并在广泛使用的自适应系统范例 ZNN 上进行了评估;实验结果表明该方法能有效缓解可扩展性问题。

问题
动态体系结构软件系统的安全分析与验证在运行时场景下面临可扩展性挑战。
方法
采用形式抽象与增量分析,为基于组件的动态系统提供自动化的组合式安全分析方法。
评估
实现原型并在自适应系统范例 ZNN 上进行实验评估,验证其在缓解可扩展性问题上的效果。
原文摘要(Abstract)

To reason about and enforce security in dynamic software systems, automated analysis and verification approaches are required. However, such approaches often encounter scalability issues, particularly when employed for runtime analysis, which is necessary in software systems with dynamically changing architectures, such as self-adaptive systems. In this work, we propose an automated formal approach for security analysis of component-based systems with dynamic architectures. This approach leverages formal abstraction and incremental analysis techniques to reduce the complexity of runtime analysis. We have implemented and evaluated our approach against ZNN, a widely known self-adaptive system exemplar. Our experimental results demonstrate the effectiveness of our approach in addressing scalability issues.

链接与引用

DOI 原文 · PDF(开放获取) ·

BibTeX
@inproceedings{paperbot8440,
  title = {Compositional Security Analysis of Dynamic Component-based Systems},
  author = {Narges Khakpour and Charilaos Skandylas},
  booktitle = {ASE},
  year = {2024},
  doi = {10.1145/3691620.3695499}
}