Information-flow Interfaces and Security Lattices

TL;DR

This paper links the concept of security lattices to information-flow interfaces, providing a formal framework for specifying and refining system security requirements.

Contribution

It introduces a semantic interpretation of information-flow interfaces using security lattices, enhancing formal security specification methods.

Findings

Security lattices offer a natural semantics for information-flow interfaces.

The framework improves formal security requirement specification.

Provides a basis for refining security policies systematically.

Abstract

Information-flow interfaces is a formalism recently proposed for specifying, composing, and refining system-wide security requirements. In this work, we show how the widely used concept of security lattices provides a natural semantic interpretation for information-flow interfaces.