Formal and Intelligent Methods  for Security and Resilience:  Education and Training Issues

Oksana Pomorova; Sergii Lysenko

Formal and Intelligent Methods for Security and Resilience: Education and Training Issues

Formal and Intelligent Methods

Publication Type:

Journal Article

Authors:

Oksana Pomorova; Sergii Lysenko

Source:

Information & Security: An International Journal, Volume 35, Issue 2, p.133-150 (2016)

Keywords:

artificial intelligence, B-method, computer networks, Formal methods, resilience, resilient system, secure protocol, security, software development

Abstract:

This article presents the results of the implementation of TEMPUS SEREIN project in the Khmelnitsky National University. The main challenge was to develop curriculum and course materials for masters and PhD students. The authors introduce the module description of the course “Formal and Intelligent Methods for Security and Resilience.” The module deals with the issues of development and usage of formal methods for designing secure software systems and implementation of formal methods for assuring security of computer networks. We also present some issues on the usage of intelligent systems for security and address the questions of enhancing systems’ resilience. The implementation of the developed training course will improve the quality of education and will make graduates more successful on the labour market.

Tag:

Education & Training

13517 reads
Google Scholar
DOI
RTF
EndNote XML

References

Singer, P. W., and Allan Friedman. Cybersecurity and Cyberwar: What Everyone Needs to Know. Oxford: Oxford University Press, 2014.

Holubenko, O.L., O.S. Petrov, and V.O. Horoshko. "Features of Training for Specialists in Information Security." Information Security (2009): 5-17.

Hrytsyuk, Y.I., and T.E. Rak. "The Training Problem of Information Security Specialists for the Ministry of Emergencies of Ukraine." In Intelligent Decision-making Systems and Problems of Computational Intelligence, 272-276. Yevpatoria: Kherson, 2011.

Website of the national Tempus/Erasmus+ office in Ukraine., 2016.

Kharchenko, Vyacheslav, Chris Phillips, and Popov Peter. MASTAC: New Curriculum for Master and Doctoral Studies in Critical Software and Computing In International Conference on Software Engineering SEESE Workshop. Leipzig, 2008.

Tarasyuk, O.M., and A.V. Gorbenko. "For Methods for Development of Critical Software." In Lecture Materials. Kharkiv: National Aerospace University Institute “KhAI”, 2009.

McDermid, John, Martyn Thomas, and Felix Redmill. "Professional Issues in System Safety Engineering." In Safety-Critical Systems: Problems, Process and Practice, edited by Chris Dale and Tom Anderson, 135-145. London: Springer, 2009.

TEMPUS SEREIN project web-site., 2016.

Website of the System Programming Department. Khmelnytskyi National University., 2016.

Monin, Jean François, and Michael G. Hinchey. Understanding Formal Methods. Springer, 2003.

Romanovsky, Alexander. "Deployment of Formal Methods in Industry: the Legacy of the FP7 ICT DEPLOY Integrated Project." ACM SIGSOFT Software Engineering Notes 37, no. 5 (2012): 1-4.

Almeida, José Bacelar, Maria João Frade, Jorge Sousa Pinto, and Simão Melo de Sousa. "An Overview of Formal Methods Tools and Techniques." In Rigorous Software Development: An Introduction to Program Verification, 15-44. London, 2011.

Hinchey, Michael G., Jonathan P. Bowen, and Emil Vassev. "Formal Methods." In Encyclopedia of Software Engineering, ed. Philip A. Laplante, 308-320. Taylor & Francis, 2010.

Laprie, Jean-Claude. "From Dependability to Resilience." In 38th Annual IEEE/IFIP International Conference on Dependable Systems and Networks. Anchorage, USA, 2008.

Neches, Robert. Engineered Resilient Systems (ERS). S&T Priority Description and Roadmap, 2011.

Reder, Leonard, John Day, Mitch Ingham, Richard Murray, and Brian Williams. Engineering Resilient Space Systems: Introduction to Short Course. Pasadena, CA: Keck Institute for Space Studies, 2012.

Tyugu, Enn. Artificial Intelligence in Cyber Defense In Proceedings of the Third International Conference on Cyber Conflict, ed. C. Czosseck, E. Tyugu, T. Wingfield. Tallinn: CCD COE, 2011.

Bitter, Christian, David A. Elizondo, and Tim Watson. "Application of Artificial Neural Networks and Related Techniques to Intrusion Detection." In The 2010 International Joint Conference on Neural Networks (IJCNN)., 2010.

Wing, Jeannette M.. A Symbiotic Relationship Between Formal Methods and Security In Computer Security, Dependability and Assurance: From Needs to Solutions, Proceedings. IEEE, 1998.

Mansour, Riham Hassan Abd. Formal Analysis and Design for Engineering Security (FADES). Vol. PhD Dissertation. Blacksburg, VA: Virginia Polytechnic Institute and State University, 2009.

Nakagawa, Hiroyuki, Kenji Taguchi, and Shinichi Honiden. Formal Specification Generator for KAOS: Model Transformation Approach to Generate Formal Specifications from KAOS Requirements Models In Proceedings of the Twenty-second IEEE/ACM International Conference on Automated Software Engineering. Atlanta, GA, 2007.

Schneider, Steve. The B-Method: An Introduction. Basingstoke, UK: Palgrave, 2001.

van Lamsweerde, A.. Elaborating Security Requirements by Construction of Intentional Anti-Models In Proceedings of the 26th International Conference on Software Engineering, ICSE 2004., 2004.

Dai, Lirong, and Kendra Cooper. "A Survey of Modelling and Analysis Approaches for Architecting Secure Software Systems." International Journal of Network Security 5, no. 2 (2007): 187-198.

Heitmeyer, Constance L., Myla M. Archer, Elizabeth I. Leonard, and John D. McLean. "Applying Formal Methods to a Certifiably Secure Software System." IEEE Transactions on Software Engineering 34, no. 1 (8): 82-97.

Heitmeyer, Constance, Myla Archer, Ramesh Bharadwaj, and Ralph Jeffords. "Tools for Constructing Requirements Specifications: The SCR Toolset at the Age of Ten." Computer Systems Science & Engineering 20, no. 1 (2005): 19-35.

Older, Susan, and Shiu-Kai Chin. "Formal Methods of Assuring Security of Protocols." The Computer Journal 45, no. 1 (2002): 46-54.

Mossakowski, Till, and Markus Roggenbach. Structured CSP – A Process Algebra as an Institution In Recent Trends in Algebraic Development Techniques. Berlin, Heidelberg: Springer, 2007.

Madeira, Pedro Miguel dos. Formal Methods for the Analysis of Security Protocols. Vol. PhD Dissertation. Lisbon: Instituto Superior Tėcnico, Universidade Tecnica de Lisboa, 2006.

Blanchet, Bruno. "Using Horn Clauses for Analyzing Security Protocols." In Formal Models and Techniques for Analyzing Security Protocols, 86-111. Amsterdam: IOS Press, 2011.

Arsac, Wihem, Giampaolo Bella, Xavier Chantry, and Luca Compagna. "Validating Security Protocols under the General Attacker." In Foundations and Applications of Security Analysis, 33-51. Berlin, Heidelberg: Springer, 2009.

Armando, Alessandro, D.A. Basin, and Y. Boichut. "The AVISPA Tool for the Automated Validation of Internet Security Protocols and Applications." In International Conference on Computer Aided Verification CAV 2005. Heidelberg: Springer, 2005.

Armando, Alessandro, and Luca Compagna. "SAT-based Model-Checking for Security Protocols Analysis." International Journal of Information Security 7, no. 1 (2008): 3-32.

Lopez, Javier, Rodrigo Roman, and Cristina Alcaraz. "Analysis of Security Threats, Requirements, Technologies and Standards in Wireless Sensor Networks." In Foundations of Security Analysis and Design V, 289-338. Vol. Lecture Notes in Computer Science, vol. 5705. Berlin, Heidelberg: Springer, 2009.

Sibilio, Eleonora. Formal Methods for Wireless Systems. Vol. PhD Thesis. Verona, Italy: Dipartimento di Informatica, Universit`a di Verona, 2011.

Abadi, Martin, and Bruno Blanchet. "Analyzing Security Protocols with Secrecy Types and Logic Programs." Journal of the ACM 52, no. 1 (2005): 102-146.

Roman, Rodrigo, M.Carmen Fernandez-Zago, Javier Lopez, and Chen Hsiao-Hwa. "Trust and Reputation Systems for Wireless Sensor Networks." In Security and Privacy in Mobile and Wireless Networking, 105-127. Leicester, UK: Troubador, 2009.

Balakrishnan, Venkat, Vijay Varadharajan, and Uday Tupakula. "Trust Management in Mobile Ad Hoc Networks." In Guide to Wireless Ad Hoc Networks, 473-502. London: Springer, 2009.

Vasudevan, Sudarshan, Jim Kurose, and Don Towsley. Design and Analysis of a Leader Election Algorithm for Mobile Ad Hoc Networks In Proceedings of the 12th IEEE International Conference on Network Protocols, ICNP 2004. IEEE Computer Society, 2004.

Hentea, Mariana. "Intelligent System for Information Security Management: Architecture and Design Issues." Issues in Informing Science & Information Technology 4 (2007): 29-40.

Anifowose, Fatai Adesina, and Safiriyu Ibiyemi Eludiora. "Application of Artificial Intelligence in Network Intrusion Detection." World Applied Programming 2, no. 3 (2012): 158-166.

Multi-Agent Based Approach for Botnet Detection in a Corporate Area Network Using Fuzzy Logic In Computer Networks Communications in Computer and Information Science, Proceedings of the 20th International Conference on Computer Networks CN 2013. Vol. 370. Lwówek Śląski, Poland, 2013.

S., Lysenko, Savenko O., A. Kryshchuk, and Y. Klyots. Botnet detection technique for corporate area network In Proceedings of the 2013 IEEE 7th International Conference on Intelligent Data Acquisition and Advanced Computing Systems. Berlin, DE: IEEE, 2013.

Pereverzeva, Inna. Formal Development of Resilient Distributed Systems. Vol. PhD Dissertation. Turku, Finland: Abo Akademi University, Faculty of Science and Engineering, 2015.

Laprie, Jean-Claude. Resilience for the Scalability of Dependability In Proceedings of the Fourth IEEE International Symposium on Network Computing and Applications, NCA'05., 2005.

Abrial, Jean-Raymond. The B-Book: Assigning Programs to Meanings . Cambridge, UK: Cambridge University Press, 1996.

Abrial, Jean-Raymond. Modeling in Event-B: System and Software Engineering. Cambridge, UK: Cambridge University Press, 2010.

Iliasov, Alexei, Elena Troubitsyna, Linas Laibinis, Alexander Romanovsky, Kimmo Varpaaniemi, Dubravka Ilic, and Timo Latvala. "Developing Mode-Rich Satellite Software by Refinement in Event-B." In Formal Methods for Industrial Critical Systems, FMICS 2010. Springer, 2010.

Tarasyuk, Anton, Elena Troubitsyna, and Linas Laibinis. Formal Modelling and Verification of Service-Oriented Systems in Probabilistic Event-B In Proceedings of the International Conference on Integrated Formal Methods, IFM 2012., 2012.

Prokhorova, Yuliya, Linas Laibinis, Elena Troubitsyna, Kimmo Varpaaniemi, and Timo Latvala. Derivation and Formal Verification of a Mode Logic for Layered Control Systems In Proceedings of the 18th Asia-Pacific Software Engineering Conference, APSEC 2011. IEEE, 2011.

Pereverzeva, Inna, Elena Troubitsyna, and Linas Laibinis. Formal Goal-Oriented Development of Resilient MAS in Event-B In Proceedings of 17th International Conference on Reliable Software Technologies. Berlin, Heidelberg: Springer-Verlag, 2012.

Avgeriou, Paris. Software Engineering for Resilient Systems In Proceedings of 4th International Workshop on SERENE 2012. Berlin, Heidelberg: Springer-Verlag, 2012.

Simulation Framework in Python., 2016.