Confidentiality properties and the B method
Programs in the presence of nondeterminism or underspecification may mask the presence of insecure information flow between variables. This may re¬sult in the refinement paradox when such programs are refined to a de¬terministic implementation. Hence nondeterministic programs that satisfy possibilis...
| Main Author: | |
|---|---|
| Published: |
King's College London (University of London)
2012
|
| Subjects: | |
| Online Access: | http://ethos.bl.uk/OrderDetails.do?uin=uk.bl.ethos.628183 |