Mitsubishi Electric Corporation

Mitsubishi Electric R&d Centre Europe B.v.

Benoit Boyer

Takeshi Ueda

Koichi Shimizu

Nobuhiro Kobayashi

Teruyoshi Yamaguchi

Tsunato Nakai

Florian Faissole

Guillaume Melquiond

The disclosure relates to a method for verifying an implementation of a security policy by a computer program. The method comprises obtaining (S) the computer program. The method further comprises, based on obtaining (S) a security policy correspondence table, annotating (S) the computer program with at least one annotation comprising an expected security type associated to a variable output by a critical instruction of the computer program. The method further comprises, based on obtaining (S) propagation rule sets, analyzing the instructions of the annotated computer program to associate (S) a propagated security type to each variable output by an instruction of the annotated computer program. The method further comprises verifying the implementation of the security policy by comparing (S) the propagated and expected security types. The disclosure further relates to a corresponding computer program, a corresponding computer-readable storage medium and a corresponding processing circuit.

Method for verifying implementation of security policy, storage medium, computer program, and processing circuit

An object of this invention is to obtain a whitelist generator with which the accuracy of data relating to the specifications of normal communication serving as an automatic generation source can be guaranteed, whereby the accuracy of a generated whitelist can be guaranteed over an entire whitelist generation flow. The whitelist generator is applied to a system formed from a plurality of devices, the plurality of devices being configured to exchange data with each other, in order to generate a whitelist used for whitelisting intrusion detection, and includes a model verification unit that verifies, on the basis of an input model, at least one of whether or not normal communication in the system has been modeled correctly and whether or not the model is logically consistent, and a model conversion unit that converts the verified model into a whitelist.

Whitelist generator, whitelist evaluator, whitelist generator/evaluator, whitelist generation method, whitelist evaluation method, and whitelist generation/evaluation method

Growing community of inventors

Rennes, France

Benoit Boyer