On the Decidability of Model-Checking Information Flow Properties

Current standard security practices do not provide substantial assurance about information flow security: the end-to-end behavior of a computing system. Noninterference is the basic semantical condition used to account for information flow security. In the literature, there are many definitions of noninterference: Non-inference, Separability and so on. Mantel presented a framework of Basic Security Predicates (BSPs) for characterizing the definitions of noninterference in the literature. Model-checking these BSPs for finite state systems was shown to be decidable in [8]. In this paper, we show that verifying these BSPs for the more expressive system model of pushdown systems is undecidable. We also give an example of a simple security property which is undecidable even for finite-state systems: the property is a weak form of non-inference called WNI, which is not expressible in Mantel’s BSP framework.

Static analysis for checking data format compatibility of programs

Large software systems are developed by composing multiple programs. If the programs manip-ulate and exchange complex data, such as network packets or files, it is essential to establish that they follow compatible data formats. Most of the complexity of data formats is associated with the headers. In this paper, we address compatibility of programs operating over headers of network packets, files, images, etc. As format specifications are rarely available, we infer the format associated with headers by a program as a set of guarded layouts. In terms of these formats, we define and check compatibility of (a) producer-consumer programs and (b) different versions of producer (or consumer) programs. A compatible producer-consumer pair is free of type mismatches and logical incompatibilities such as the consumer rejecting valid outputs gen-erated by the producer. A backward compatible producer (resp. consumer) is guaranteed to be compatible with consumers (resp. producers) that were compatible with its older version. With our prototype tool, we identified 5 known bugs and 1 potential bug in (a) sender-receiver modules of Linux network drivers of 3 vendors and (b) different versions of a TIFF image library.

Checking Liveness Properties of Presburger Counter Systems Using Reachability Analysis

Counter systems are a well-known and powerful modeling notation for specifying infinite-state systems. In this paper we target the problem of checking liveness properties in counter systems. We propose two semi decision techniques towards this, both of which return a formula that encodes the set of reachable states of the system that satisfy a given liveness property. A novel aspect of our techniques is that they use reachability analysis techniques, which are well studied in the literature, as black boxes, and are hence able to compute precise answers on a much wider class of systems than previous approaches for the same problem. Secondly, they compute their results by iterative expansion or contraction, and hence permit an approximate solution to be obtained at any point. We state the formal properties of our techniques, and also provide experimental results using standard benchmarks to show the usefulness of our approaches. Finally, we sketch an extension of our liveness checking approach to check general CTL properties.

Safe Compositional Specification of Networking Systems: TRAFFIC The Language and Its Type Checking

This paper formally defines the operational semantic for TRAFFIC, a specification language for flow composition applications proposed in BUCS-TR-2005-014, and presents a type system based on desired safety assurance. We provide proofs on reduction (weak-confluence, strong-normalization and unique normal form), on soundness and completeness of type system with respect to reduction, and on equivalence classes of flow specifications. Finally, we provide a pseudo-code listing of a syntax-directed type checking algorithm implementing rules of the type system capable of inferring the type of a closed flow specification.

ITEM : An Integrated Transport Economy Model - Price Elasticities of Freight Transport Demand in Canada : Three Canadian Markets and Four Commodities.

Rapport de recherche

The Economics of Oil, Biofuel and Food Commodities

Nous étudions l'effet sur le marché des aliments de l'introduction sur le marché de l'énergie de biocarburants, comme substitut aux combustibles fossiles. Nous supposons une économie où cohabitent sur le marché de l'énergie un cartel pétrolier et une frange compétitive de cultivateurs qui produit de l'énergie sous forme de biocarburant. Les cultivateurs produisent également des produits agricoles qu'ils vendent sur le marché des aliments. Nous caractérisons la relation qui en résulte entre le prix de l'énergie et le prix des aliments, ainsi que le sentier d'extraction du cartel pétrolier et le sentier de prix de l'énergie. Il est démontré que le prix des aliments va croître aussi longtemps que le stock de pétrole n'est pas épuisé, et cela que la population soit croissante ou non. Il continuera à croître une fois le stock de pétrole épuisé si la population est croissante. Les effets de l'amélioration dans la productivité de la terre dans la production d'aliments ainsi que dans la production de biocarburant sont analysés.

An experimental analysis of obsessive-compulsive checking as avoidance behaviour

Resumen tomado de la publicación

An experimental analysis of body checking

The relationship between repeated body checking and its impact on body size estimation and body dissatisfaction is of interest for two reasons. First, it has importance in theoretical accounts of the maintenance of eating disorders and, second, body checking is targeted in cognitive-behavioural treatment. The aim of this study was to determine the impact of manipulating body checking on body size estimation and body dissatisfaction. Sixty women were randomly assigned either to repeatedly scrutinize their bodies in a critical way in the mirror ("high body checking") or to refrain from body checking but to examine the whole of their bodies in a neutral way ("low body checking"). Body dissatisfaction, feelings of fatness and the strength of a particular self-critical thought increased immediately after the manipulation among those in the high body checking condition. Feelings of fatness decreased among those in the low body checking condition. These changes were short-lived. The manipulation did not effect estimations of body size or the discrepancy between estimations of body size and desired body size. The implications of these findings for understanding the influence of body checking on the maintenance of body dissatisfaction are considered. (c) 2006 Elsevier Ltd. All rights reserved.