Sums and Lovers: Case Studies in Security, Compositionality and Refinement

  • Annabelle K. McIver
  • Carroll C. Morgan
Conference paper

DOI: 10.1007/978-3-642-05089-3_19

Part of the Lecture Notes in Computer Science book series (LNCS, volume 5850)
Cite this paper as:
McIver A.K., Morgan C.C. (2009) Sums and Lovers: Case Studies in Security, Compositionality and Refinement. In: Cavalcanti A., Dams D.R. (eds) FM 2009: Formal Methods. FM 2009. Lecture Notes in Computer Science, vol 5850. Springer, Berlin, Heidelberg


A truly secure protocol is one which never violates its security requirements, no matter how bizarre the circumstances, provided those circumstances are within its terms of reference. Such cast-iron guarantees, as far as they are possible, require formal techniques: proof or model-checking. Informally, they are difficult or impossible to achieve.

Our technique is refinement, until recently not much applied to security. We argue its benefits by giving rigorous formal developments, in refinement-based program algebra, of several security case studies.

A conspicuous feature of our studies is their layers of abstraction and –for the main study, in particular– that the protocol is unbounded in state, placing its verification beyond the reach of model checkers.

Correctness in all contexts is crucial for our goal of layered, refinement-based developments. This is ensured by our semantics in which the program constructors are monotonic with respect to “security-aware” refinement, which is in turn a generalisation of compositionality.


Refinement of security formalised secrecy hierarchical security reasoning compositional semantics 


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2009

Authors and Affiliations

  • Annabelle K. McIver
    • 1
  • Carroll C. Morgan
    • 2
  1. 1.Dept. Computer ScienceMacquarie UniversityAustralia
  2. 2.School of Comp. Sci. and Eng.Univ. New South WalesAustralia

Personalised recommendations