P4-Misuse
Reasoning about Accidental and Malicious Misuse via Formal Models of User Expectations and Software Systems
To aid security analysts in identifying and protecting against accidental and malicious actions by users or software through automated reasoning on unified representations of user expectations and software implementation to identify misuses sensitive to usage and machine context.
Research questions
- Misuse. How can analysis techniques that identify misuse be constructed to incorporate context in terms of user expectations of behavior by other users and by software?
- Modeling. How can accidental and malicious actions by users or software in disparate contexts be formalized as violations of contextually relevant norms that account for user expectations of runtime behavior of users and software?
- Discrepancy. What automated reasoning methods identify discrepancies between user expectations and software implementations in a contextually relevant manner?
- Composition. What formal representations of user expectations and software implementations support modularity and composition?