Development of secured systems by mixing programs, specifications and proofs in an object-oriented programming environment. A case study within the FoCaLiZe environment

Damien Doligez (1) , Mathieu Jaume (2) , Renaud Rioboo (3, 4)

1 GALLIUM - Programming languages, types, compilation and proofs
2 SPI - Sémantiques, preuves et implantation
3 CEDRIC - Centre d'études et de recherche en informatique et communications
4 ENSIIE - Ecole Nationale Supérieure d'Informatique pour l'Industrie et l'Entreprise

FoCaLiZe is an object-oriented programming environment that combines specifications, programs and proofs in the same language. This paper describes how its features can be used to formally express specifications and to develop by stepwise refinement the design and implementation of se- cured systems, while proving that the implementation meets its specification or design requirements. We thus obtain a modular implementation of a generic framework for the def- inition of security policies together with certified enforce- ment mechanism for these policies.

Domaines: Langage de programmation [cs.PL]

Damien Doligez, Mathieu Jaume, Renaud Rioboo. Development of secured systems by mixing programs, specifications and proofs in an object-oriented programming environment. A case study within the FoCaLiZe environment. PLAS - Seventh Workshop on Programming Languages and Analysis for Security, Jun 2012, Beijing, China. ⟨10.1145/2336717.2336726⟩. ⟨hal-00773654⟩