Table Of ContentInformation Technology / Security & Auditing K Multilevel Modeling
s
i
ę
In order to perform effective analysis of today’s information security systems, numerous ż
o
components must be taken into consideration. This book presents a well-organized, p
o of Secure Systems
consistent solution created by the author, that allows for precise multilevel analysis of l
s
information security systems and accounts for all of the significant details. k
i
Enabling the multilevel modeling of secure systems, the quality of protection modeling
in QoP-ML
language (QoP-ML) approach provides for the abstraction of security systems while M
maintaining an emphasis on quality protection. This book introduces the basis of the
u
QoP modeling language along with advanced analysis modules, syntax, and semantics. l
t
It delineates the steps used in cryptographic protocols and introduces a multilevel i
l
protocol analysis that expands current understanding. e
Bogdan Księżopolski
v
e
• Introduces quality of protection evaluation of IT Systems
l
• Covers the financial, economic, and CO emission analysis phase M
2
• Supplies a multilevel analysis of Cloud-based data centers o
d
• Details the structures for advanced communication modeling and energy analysis
e
• Considers security and energy efficiency trade-offs for the protocols of wireless l
i
n
sensor network architectures
g
• Includes case studies that illustrate the QoP analysis process using QoP-ML
o
• Examines the robust security metrics of cryptographic primitives f
• Compares and contrasts QoP-ML with PL/SQL, SecureUML, and UMLsec S
approaches by means of the SEQUAL framework e
c
u
The book explains the formal logic for representing the relationships between security r
e
mechanisms in a manner that offers the possibility to evaluate security attributes. It
presents the architecture and API of tools that ensure automatic analysis, including S
the automatic quality of the protection analysis tool (AQoPA), crypto metrics tool y
s
(CMTool), and security mechanisms evaluation tool (SMETool).
t
e
m
The book includes a number of examples and case studies that illustrate the QoP
analysis process by QoP-ML. Every operation defined by QoP-ML is described within s
parameters of security metrics to help you better evaluate the impact of each operation
i
on your system’s security. n
Q
o
P
K21236 -
M
6000 Broken Sound Parkway, NW
Suite 300, Boca Raton, FL 33487 ISBN: 978-1-4822-0255-7
L
711 Third Avenue 90000
New York, NY 10017
an informa business
2 Park Square, Milton Park
www.crcpress.com Abingdon, Oxon OX14 4RN, UK
9 781482 202557
www.auerbach-publications.com
K21236 mech rev.indd 1 5/11/15 10:02 AM
Multilevel Modeling
of Secure Systems
in QoP-ML
OTHER INFORMATION SECURITY BOOKS FROM AUERBACH
Android Malware and Analysis PCI Compliance: The Definitive Guide
Ken Dunham, Shane Hartman, Manu Quintans, Abhay Bhargav
Jose Andre Morales, and Tim Strazzere ISBN 978-1-4398-8740-0
ISBN 978-1-4822-5219-4
Secure Data Provenance and Inference
Anonymous Communication Networks: Control with Semantic Web
Protecting Privacy on the Web Bhavani Thuraisingham, Tyrone Cadenhead,
Kun Peng
Murat Kantarcioglu, and Vaibhav Khadilkar
ISBN 978-1-4398-8157-6
ISBN 978-1-4665-6943-0
Case Studies in Secure Computing:
Securing Systems: Applied Security
Achievements and Trends
Architecture and Threat Models
Edited by Biju Issac and Nauman Israr
Brook S. E. Schoenfield
ISBN 978-1-4822-0706-4
ISBN 978-1-4822-3397-1
Conducting Network Penetration and
Security for Service Oriented Architectures
Espionage in a Global Environment
Walter Williams
Bruce Middleton
ISBN 978-1-4665-8402-0
ISBN 978-1-4822-0647-0
Cybersecurity: Protecting Critical Security without Obscurity:
Infrastructures from Cyber Attack and A Guide to Confidentiality, Authentication,
Cyber Warfare and Integrity
Thomas A. Johnson J.J. Stapleton
ISBN 978-1-4822-3922-5 ISBN 978-1-4665-9214-8
Cybervetting: Internet Searches for The Frugal CISO: Using Innovation and
Vetting, Investigations, and Open-Source Smart Approaches to Maximize Your
Intelligence, Second Edition Security Posture
Edward J. Appel Kerry Ann Anderson
ISBN 978-1-4822-3885-3 ISBN 978-1-4822-2007-0
Data Privacy for the Smart Grid
The Practical Guide to HIPAA Privacy and
Rebecca Herold and Christine Hertzog
Security Compliance, Second Edition
ISBN 978-1-4665-7337-6
Rebecca Herold and Kevin Beaver
Ethical Hacking and Penetration ISBN 978-1-4398-5558-4
Testing Guide
The State of the Art in Intrusion Prevention
Rafay Baloch
and Detection
ISBN 978-1-4822-3161-8
Al-Sakib Kha Pathan
Intrusion Detection in Wireless ISBN 978-1-4822-0351-6
Ad-Hoc Networks
Trade Secret Theft, Industrial Espionage,
Edited by Nabendu Chaki and Rituparna Chaki
ISBN 978-1-4665-1565-9 and the China Threat
Carl Roper
Multilevel Security for Relational Databases ISBN 978-1-4398-9938-0
Osama S. Faragallah, El-Sayed M. El-Rabaie, Fathi
E. Abd El-Samie, Ahmed I. Sallam, and Hala S. Web Security: A WhiteHat Perspective
El-Sayed Hanqing Wu and Liz Zhao
ISBN 978-1-4822-0539-8 ISBN 978-1-4665-9261-2
AUERBACH PUBLICATIONS
www.auerbach-publications.com • To Order Call: 1-800-272-7737 • E-mail: [email protected]
Multilevel Modeling
of Secure Systems
in QoP-ML
Bogdan Księżopolski
CRC Press
Taylor & Francis Group
6000 Broken Sound Parkway NW, Suite 300
Boca Raton, FL 33487-2742
© 2016 by Taylor & Francis Group, LLC
CRC Press is an imprint of Taylor & Francis Group, an Informa business
No claim to original U.S. Government works
Version Date: 20150427
International Standard Book Number-13: 978-1-4822-0256-4 (eBook - PDF)
This book contains information obtained from authentic and highly regarded sources. Reasonable
efforts have been made to publish reliable data and information, but the author and publisher cannot
assume responsibility for the validity of all materials or the consequences of their use. The authors and
publishers have attempted to trace the copyright holders of all material reproduced in this publication
and apologize to copyright holders if permission to publish in this form has not been obtained. If any
copyright material has not been acknowledged please write and let us know so we may rectify in any
future reprint.
Except as permitted under U.S. Copyright Law, no part of this book may be reprinted, reproduced,
transmitted, or utilized in any form by any electronic, mechanical, or other means, now known or
hereafter invented, including photocopying, microfilming, and recording, or in any information stor-
age or retrieval system, without written permission from the publishers.
For permission to photocopy or use material electronically from this work, please access www.copy-
right.com (http://www.copyright.com/) or contact the Copyright Clearance Center, Inc. (CCC), 222
Rosewood Drive, Danvers, MA 01923, 978-750-8400. CCC is a not-for-profit organization that pro-
vides licenses and registration for a variety of users. For organizations that have been granted a photo-
copy license by the CCC, a separate system of payment has been arranged.
Trademark Notice: Product or corporate names may be trademarks or registered trademarks, and are
used only for identification and explanation without intent to infringe.
Visit the Taylor & Francis Web site at
http://www.taylorandfrancis.com
and the CRC Press Web site at
http://www.crcpress.com
To my wife Beata and my son Mateusz
Contents
ListofFigures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiii
ListofTables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Listings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xix
1 Introductiontomultilevelmodelingofsecuresystems . . . . . . . . . 1
1.1 Modeldrivensecurity . . . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Qualityofprotectionmodels . . . . . . . . . . . . . . . . . . . . . 3
1.3 Multi-levelanalysisscheme . . . . . . . . . . . . . . . . . . . . . 7
1.4 Model-basedmulti-leveldecisionsupportsystem . . . . . . . . . . 11
1.5 Structureofthebook . . . . . . . . . . . . . . . . . . . . . . . . . 14
2 BasisofQoP-ML . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1 Datatypes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.2 Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.3 Equationalrules . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
2.4 Processtypes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
2.5 Messagepassing . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
2.5.1 Synchronouscommunication. . . . . . . . . . . . . . . . . 20
2.6 Controloperators . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
2.6.1 Conditionstatement . . . . . . . . . . . . . . . . . . . . . 20
2.6.2 Repetition . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
2.6.3 Otherstructures . . . . . . . . . . . . . . . . . . . . . . . . 21
2.7 Securitymetrics . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
2.8 Processinstantiation . . . . . . . . . . . . . . . . . . . . . . . . . 24
2.9 QoP-MLbasealgorithms . . . . . . . . . . . . . . . . . . . . . . . 26
2.10 ExperimentalvalidationoftheQoP-ML . . . . . . . . . . . . . . . 27
2.11 Casestudy:TLShandshakeprotocolwithsecuredatatransmission 28
2.11.1 Protocolmodeling . . . . . . . . . . . . . . . . . . . . . . 30
vii
viii (cid:4) Contents
2.11.1.1 Functions . . . . . . . . . . . . . . . . . . . . . 30
2.11.1.2 Equations . . . . . . . . . . . . . . . . . . . . . 33
2.11.1.3 Channels . . . . . . . . . . . . . . . . . . . . . . 33
2.11.1.4 Protocolflow. . . . . . . . . . . . . . . . . . . . 33
2.11.2 Securitymetricsdefinition . . . . . . . . . . . . . . . . . . 40
2.11.3 Processinstantiation . . . . . . . . . . . . . . . . . . . . . 42
2.11.4 QoP-MLprocessingandQoPevaluation. . . . . . . . . . . 44
3 Qualityofprotectionevaluationofsecuritymechanisms . . . . . . . . 47
3.1 Factsandrules . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
3.2 Evaluationrules . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
3.3 Inferencerule . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
3.4 Inferencemechanism . . . . . . . . . . . . . . . . . . . . . . . . . 53
3.5 Securityattributes . . . . . . . . . . . . . . . . . . . . . . . . . . 54
3.6 Conflictsbetweenrules . . . . . . . . . . . . . . . . . . . . . . . . 54
3.7 Evaluationrulessystem . . . . . . . . . . . . . . . . . . . . . . . 56
3.8 QoPevaluationprocessofsecuritymechanisms . . . . . . . . . . . 56
3.9 Backgroundofthemodel . . . . . . . . . . . . . . . . . . . . . . . 56
3.10 MethodofQoPevaluationofsecuritymechanisms . . . . . . . . . 59
3.11 Casestudy:TLShandshakeprotocol . . . . . . . . . . . . . . . . 60
3.11.1 QoPmodeling . . . . . . . . . . . . . . . . . . . . . . . . 61
3.11.2 Linkingstage . . . . . . . . . . . . . . . . . . . . . . . . . 61
3.11.3 Configurationstage . . . . . . . . . . . . . . . . . . . . . . 65
3.11.4 QoPevaluationstage . . . . . . . . . . . . . . . . . . . . . 65
3.11.5 Qualitativeestimation . . . . . . . . . . . . . . . . . . . . 68
3.12 Formalmodelgoalsevaluation . . . . . . . . . . . . . . . . . . . . 69
4 Advancedcommunicationandenergyefficiencymodeling . . . . . . . 71
4.1 Topology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
4.1.1 Connectiondefinition. . . . . . . . . . . . . . . . . . . . . 73
4.1.2 Qualityofconnections . . . . . . . . . . . . . . . . . . . . 75
4.1.3 Transmissiontime . . . . . . . . . . . . . . . . . . . . . . 76
4.1.4 Transmissiontime–Algorithmsstructure . . . . . . . . . . 76
4.2 Packetfiltering . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
4.2.1 Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
4.2.2 Inputandoutputmessages . . . . . . . . . . . . . . . . . . 78
4.3 Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
4.4 Energyanalysis . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
4.5 Casestudy–MultihopauthenticationprotocolsforWSN . . . . . . 81
4.5.1 Directjointosink:DJS . . . . . . . . . . . . . . . . . . 83
orig
4.5.2 Indirectprotocolstojointhesink . . . . . . . . . . . . . . 83
4.5.2.1 Protocol:IJS . . . . . . . . . . . . . . . . . . 84
orig
4.5.2.2 Protocol:IJS . . . . . . . . . . . . . . . 84
NK,dec/enc
4.5.2.3 Protocol:IJS . . . . . . . . . . . . . . . 85
K,dec/enc
4.5.2.4 Protocol:IJS . . . . . . . . . . . . . . . . 86
NK,onion
Contents (cid:4)
ix
4.6 TheWSNprotocolsmodelinginQoP-ML . . . . . . . . . . . . . . 87
4.6.1 Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
4.6.2 Equations . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
4.6.3 Channels . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
4.6.4 Protocolflow . . . . . . . . . . . . . . . . . . . . . . . . . 91
4.6.4.1 HostNewNode . . . . . . . . . . . . . . . . . . 91
4.6.4.2 HostNeighbor . . . . . . . . . . . . . . . . . . . 93
4.6.4.3 HostSink . . . . . . . . . . . . . . . . . . . . . 96
4.6.4.4 HostJ OriginalForwarder . . . . . . . . . . . . . 98
4.6.4.5 HostJ NK EncDec . . . . . . . . . . . . . . . . 99
4.6.4.6 HostJ SessKey EncDec . . . . . . . . . . . . . . 100
4.6.4.7 HostJ Onion. . . . . . . . . . . . . . . . . . . . 100
4.6.5 Thealgorithmstructure. . . . . . . . . . . . . . . . . . . . 101
4.6.6 Securitymetrics . . . . . . . . . . . . . . . . . . . . . . . 101
4.6.7 Processinstantiation . . . . . . . . . . . . . . . . . . . . . 105
4.6.8 WSNprotocolsevaluation–Results . . . . . . . . . . . . . 110
4.6.8.1 Executiontime–Scenario1–(MicaZmotes) . . 110
4.6.8.2 Energyconsumption–Scenario1(MicaZmotes) 113
4.6.8.3 Execution time – Scenario 2 (Imote2, 13MHz
motes) . . . . . . . . . . . . . . . . . . . . . . . 114
4.6.8.4 Energyconsumption–Scenario2(Imote2,13MHz
motes) . . . . . . . . . . . . . . . . . . . . . . . 115
4.6.8.5 Execution time – Scenario 3 (Imote2, 104MHz
motes) . . . . . . . . . . . . . . . . . . . . . . . 116
4.6.8.6 Energyconsumption–Scenario3(Imote2,104MHz
motes) . . . . . . . . . . . . . . . . . . . . . . . 117
4.6.8.7 Energyconsumption–Motescomparisons . . . . 118
5 Environmentalimpactandfinancialcostsanalysis . . . . . . . . . . . 123
5.1 Thefinancialandeconomicanalyses . . . . . . . . . . . . . . . . 124
5.1.1 Costofenergyconsumptionoftheinfrastructure . . . . . . 124
5.1.2 Costofcoolinginfrastructureutilization . . . . . . . . . . . 126
5.2 CO emissionsanalysis . . . . . . . . . . . . . . . . . . . . . . . 127
2
5.3 Case study – Energy and environmental impact analysis of a data
center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
5.3.1 Scenario. . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
5.3.2 Role-basedaccesscontrolmodelinQoP-ML . . . . . . . . 130
5.3.2.1 Themodel . . . . . . . . . . . . . . . . . . . . . 131
5.3.2.2 Securitymetrics . . . . . . . . . . . . . . . . . . 133
5.3.3 Theanalyses . . . . . . . . . . . . . . . . . . . . . . . . . 135
5.3.3.1 Thetimeanalysis . . . . . . . . . . . . . . . . . 135
5.3.3.2 Theenergyusageanalysis . . . . . . . . . . . . . 137
5.3.3.3 Thefinancialandeconomicanalysis . . . . . . . 138
5.3.3.4 CO emissionanalysis . . . . . . . . . . . . . . . 141
2
5.3.3.5 TheQoPanalysis . . . . . . . . . . . . . . . . . 143
