CoSMeDis: a distributed social media platform with formally verified confidentiality guarantees

Bauereiß, Thomas and Pesenti Gritti, Armando and Popescu, Andrei and Raimondi, Franco (2017) CoSMeDis: a distributed social media platform with formally verified confidentiality guarantees. In: 38th IEEE Symposium on Security and Privacy, 22-26 May 2017, San Jose, CA, USA.

[img]
Preview
PDF - Final accepted version (with author's formatting)
Download (273kB) | Preview

Abstract

We present the design, implementation and information flow verification of CoSMeDis, a distributed social media platform. The system consists of an arbitrary number of communicating nodes, deployable at different locations over the Internet. Its registered users can post content and establish intra-node and inter-node friendships, used to regulate access control over the posts. The system’s kernel has been verified in the proof assistant Isabelle/HOL and automatically extracted as Scala code. We formalized a framework for composing a class of information flow security guarantees in a distributed system, applicable to input/output automata. We instantiated this framework to confidentiality properties for CoSMeDis’s sources of information: posts, friendship requests, and friendship status.

Item Type: Conference or Workshop Item (Paper)
Research Areas: A. > School of Science and Technology > Computer Science > Foundations of Computing group
Item ID: 22100
Notes on copyright: © 2017 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
Useful Links:
Depositing User: Andrei Popescu
Date Deposited: 19 Jun 2017 16:21
Last Modified: 28 Jun 2017 10:19
URI: http://eprints.mdx.ac.uk/id/eprint/22100

Actions (login required)

Edit Item Edit Item

Full text downloads (NB count will be zero if no full text documents are attached to the record)

Downloads per month over the past year