Reduced-complexity verification for initial-state opacity in modular discrete event systems

Abstract In this paper, we propose and analyze reduced-complexity methodologies for verifying initial-state opacity in modular discrete event systems. Initial-state opacity requires that the membership of the system initial state to a given set of secret states S remains opaque (uncertain) to an intruder who has complete knowledge of the system model and observes system activity through some natural projection map. In the modular setting we consider, the given system is modeled as a composition (synchronous product) of M modules [ G 1 , G 2 , …, G M ] where each module G i is a non-deterministic finite automaton with N i states with the set of secret states S is of the form S = [( x 1 , x 2 , …, x M )| x i S i ], where S i is the set of secret states for module G i . Assuming that the pairwise shared events are pairwise observable and that the intruder observes events that are observable in at least one module, we provide a modular algorithm for verifying initial-state opacity with O ( MN M–1 2 N2 ) state and time complexity, where N = max i N i . This is a considerable reduction compared to the O (2 ( NM )2 ) state and time complexity of the centralized verification method, which verifies initial-state opacity by considering the composed system as a monolithic system.

[1]  Stéphane Lafortune,et al.  Diagnosability of Discrete Event Systems with Modular Structure , 2006, Discret. Event Dyn. Syst..

[2]  Maciej Koutny,et al.  Opacity Generalised to Transition Systems , 2005, Formal Aspects in Security and Trust.

[3]  Steve A. Schneider,et al.  CSP and Anonymity , 1996, ESORICS.

[4]  Roberto Gorrieri,et al.  A taxonomy of trace-based security properties for CCS , 1994, Proceedings The Computer Security Foundations Workshop VII.

[5]  Christoforos N. Hadjicostis,et al.  Notions of security and opacity in discrete event systems , 2007, 2007 46th IEEE Conference on Decision and Control.

[6]  Raja Sengupta,et al.  Diagnosability of discrete-event systems , 1995, IEEE Trans. Autom. Control..

[7]  A. Saboori,et al.  Verification of initial-state opacity in security applications of DES , 2008, 2008 9th International Workshop on Discrete Event Systems.

[8]  P. Ramadge,et al.  Supervisory control of a class of discrete event processes , 1987 .