TRUST:Team for Research in Ubiquitous Secure Technologies TRUSTed Model-Integrated Computing Gabor Karsai ISIS/Vanderbilt University NSF STC Review September 13, 2004

Towards TRUSTed Model-Integrated Computing Multiple-aspect modeling languages for systems/security co-design Understanding & modeling inter- dependence between security aspects & core systems aspects Analysis tools for co-verifying security, performance & safety properties Domain-Specific Modeling Languages Matlab Code-Gen. Matlab Code-Gen. Config. Generator Model-Driven Generator Technology Modeling of generators Generating generators Provably correct generators Embeddable generators if (inactiveInterval != -1) { if (thisInterval > inactiveInterval) { (int)(System.currentTimeMillis() - lastAccessed) / 1000; int thisInterval = invalidate(); } ssm.removeSession(this); ServerSessionManager ssm = ServerSessionManager.getManager(); private long lastAccessedTime = creationTime; * session, as the number of milliseconds since midnight, January 1, 1970 /** * Return the last time the client sent a request associated with this */ public long getLastAccessedTime() { * a value associated with the session, do not affect the access time. * GMT. Actions that your application takes, such as getting or setting return (this.lastAccessedTime); this.lastAccessedTime = time; * should be called by the context when a request comes in for a particular * Update the accessed time information for this session. This method this.lastAccessedTime = this.thisAccessedTime; this.thisAccessedTime = System.currentTimeMillis(); public void access() { * session, even if the application does not reference it. lastAccessedTime = ((Long) stream.readObject()).longValue(); lastAccessedTime = 0L; this.isNew=false; isNew = ((Boolean) stream.readObject()).booleanValue(); maxInactiveInterval = ((Integer) stream.readObject()).intValue(); 2 Configuration Specification Code Analysis Tool NSF STC Review NSF STC Review September 13, 2004

MIC Solution for Secure Systems Meta-modeling & Model Weaving TRUST MIC Solution for Secure Systems Meta-modeling & Model Weaving Multiple-aspect modeling languages are defined by formal meta-models Security models are built independently from platforms & expressed as patterns Model weaving technology is used to generate integrated security/systems models Model-based generators are used to generate systems on Secure Platforms Access Control Meta-Model Composition Meta-Models GME Meta-Modeling built by generated from Security Models Composition Models GME S-ESML Modeling built by generated from Integrated Model Model Weaver weaved by 3 generated from Secure Platform NSF STC Review NSF STC Review September 13, 2004

TRUSTed MIC: Summary Key concepts Desired TRUST properties are explicitly captured on the model level Model checkers verify emerging system properties Tools are available for maintaining, adapting, and verifying security models Trusted software systems are automatically generated for diverse platforms Research issues Modeling language for TRUST properties Model verification algorithms Model weaving tools Tools for TRUST model management Integration on TRUSTed platforms TRUSTed certifiable generators and model transformation tools Integration Direct use of security technology results: principles, algorithms, techniques Bridge towards social science aspects: integration of duties of care, privacy, and information policy study results as explicit TRUST models NSF STC Review September 13, 2004