Developing Secure Applications: A Systematic Approach

Abstract

This paper-Presents parts of the SECREDS project which aims to bridge the gap between system modeling and implementation using a high-level programming language. Within SECREDS secure applications are developed top down starting with a top-level specification. Top-level specifications are given by our computational model and application-specific security policies are specified using our security requirement logic. To implement a top-level specification we developed a high-level programming language called INSEL + offering language concepts well adapted to our underlying model. We will present main features of INSEL + focusing on access control aspects and we will outline some guidelines to support the systematic implementation of a given top-level specification preserving specified security properties.