Iterative Analysis to Improve Key Properties of Critical Human-Intensive Processes: An Election Security Example

作者：Osterweil Leon J^*; Bishop Matt; Conboy Heather M; Phan Huong; Simidchieva Borislava I; Avrunin George S; Clarke Lori A; Peisert Sean

来源：ACM Transactions on Privacy and Security, 2017, 20(2): 5.

DOI：10.1145/3041041

• Process modeling
• iterative analysis
• model checking
• fault tree analysis
• elections

In this article, we present an approach for systematically improving complex processes, especially those involving human agents, hardware devices, and software systems. We illustrate the utility of this approach by applying it to part of an election process and show how it can improve the security and correctness of that subprocess. We use the Little-JIL process definition language to create a precise and detailed definition of the process. Given this process definition, we use two forms of automated analysis to explore whether specified key properties, such as security and safety policies, can be undermined. First, we use model checking to identify process execution sequences that fail to conform to event-sequence properties. After these are addressed, we apply fault tree analysis to identify when the misperformance of steps might allow undesirable outcomes, such as security breaches. The results of these analyses can provide assurance about the process; suggest areas for improvement; and, when applied to a modified process definition, evaluate proposed changes.

• 出版日期2017-5