Trustworthy Global Computing: 8th International Symposium, TGC 2013, Buenos Aires, Argentina, August 30-31, 2013, Revised Selected Papers

331 Pages·2014·7.553 MB·English

by  Martín Abadi, Alberto Lluch Lafuente (eds.)

A
Martín Abadi
b
a
d Alberto Lluch Lafuente (Eds.)
i

·

L
l
u
c
h

L
a
f
u
e
n
t
e

(
E
d 8
Trustworthy
s 5
.
) 3
8

S
C Global Computing
N
L
8th International Symposium, TGC 2013
Buenos Aires, Argentina, August 30–31, 2013
Revised Selected Papers
T
r
u
s
t
w
o
r
t
h
y

G
l
o
b
a
l

C
o
m
p
u
t
i
n
g
TGC
2013
Lecture Notes in Computer Science 8358
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison
Lancaster University, Lancaster, UK
Takeo Kanade
Carnegie Mellon University, Pittsburgh, PA, USA
Josef Kittler
University of Surrey, Guildford, UK
Jon M. Kleinberg
Cornell University, Ithaca, NY, USA
Alfred Kobsa
University of California, Irvine, CA, USA
Friedemann Mattern
ETH Zurich, Zürich, Switzerland
John C. Mitchell
Stanford University, Stanford, CA, USA
Moni Naor
Weizmann Institute of Science, Rehovot, Israel
Oscar Nierstrasz
University of Bern, Bern, Switzerland
C. Pandu Rangan
Indian Institute of Technology, Madras, India
Bernhard Steffen
TU Dortmund University, Dortmund, Germany
Demetri Terzopoulos
University of California, Los Angeles, CA, USA
Doug Tygar
University of California, Berkeley, CA, USA
Gerhard Weikum
Max Planck Institute for Informatics, Saarbruecken, Germany
For furthervolumes:
http://www.springer.com/series/7407
Martín Abadi Alberto Lluch Lafuente (Eds.)
•
Trustworthy
Global Computing
8th International Symposium, TGC 2013
Buenos Aires, Argentina, August 30–31, 2013
Revised Selected Papers
123
Editors
MartínAbadi Alberto LluchLafuente
Microsoft Research IMT InstituteforAdvanced Studies
Mountain View, CA Lucca
USA Italy
ISSN 0302-9743 ISSN 1611-3349 (electronic)
ISBN 978-3-319-05118-5 ISBN 978-3-319-05119-2 (eBook)
DOI 10.1007/978-3-319-05119-2
SpringerChamHeidelbergNewYorkDordrechtLondon
LibraryofCongressControlNumber:2014933391
LNCSSublibrary:SL1–TheoreticalComputerScienceandGeneralIssues
(cid:2)SpringerInternationalPublishingSwitzerland2014
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.Exemptedfromthislegalreservationarebriefexcerptsinconnectionwith
reviewsorscholarlyanalysisormaterialsuppliedspecificallyforthepurposeofbeingenteredandexecuted
onacomputersystem,forexclusiveusebythepurchaserofthework.Duplicationofthispublicationor
partsthereofispermittedonlyundertheprovisionsoftheCopyrightLawofthePublisher’slocation,inits
currentversion,andpermissionforusemustalwaysbeobtainedfromSpringer.Permissionsforusemaybe
obtainedthroughRightsLinkattheCopyrightClearanceCenter.Violationsareliabletoprosecutionunder
therespectiveCopyrightLaw.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Whiletheadviceandinformationinthisbookarebelievedtobetrueandaccurateatthedateofpublication,
neithertheauthorsnortheeditorsnorthepublishercanacceptanylegalresponsibilityforanyerrorsor
omissions that may be made. The publisher makes no warranty, express or implied, with respect to the
materialcontainedherein.
Printedonacid-freepaper
SpringerispartofSpringerScience+BusinessMedia(www.springer.com)
Preface
ThisvolumecontainstheproceedingsofTGC2013,the8thInternationalSymposium
on Trustworthy Global Computing. The symposium was held in Buenos Aires,
Argentina,duringAugust30–31,2013.Itwasco-locatedwithCONCUR,QEST,and
FORMATS, as part of the Buenos Aires Concurrency and Dependability Week.
Informal pre-proceedings were available in electronic form to the participants. The
papers in this volume have been further improved by the authors, in response to
helpful feedback received at the symposium.
The Symposium on Trustworthy Global Computing is an international annual
venue dedicated to safe and reliable computation in the so-called global computers,
i.e., those computational abstractions emerging in large-scale infrastructures such as
service-oriented architectures, autonomic systems, and cloud computing systems. It
focuses on frameworks, tools, algorithms, and protocols for open-ended, large-scale
systems and applications, and on rigorous reasoning about their behavior and prop-
erties.Theunderlyingmodelsofcomputationincorporatecodeanddatamobilityover
distributed networks that connect heterogeneous devices, often with dynamically
changing topologies.
The first TGC event took place in Edinburgh in 2005, with the co-sponsorship of
IFIPTC-2,aspartofETAPS2005.TGC2005wastheevolutionofthepreviousGlobal
ComputingIworkshops held inRoveretoin2003and 2004 (see LNCS vol. 2874) as
wellasoftheworkshopsonFoundationofGlobalComputingheldassatelliteeventsof
ICALP and CONCUR (see ENTCS vol. 85). Four editions of TGC were co-located
with the reviews of the EU-funded projects AEOLUS, MOBIUS, and SENSORIA
withintheFP6initiative.TheywereheldinLucca,Italy(TGC2006,LNCSvol.4661);
inSophiaAntipolis,France(TGC2007,LNCSvol.4912);inBarcelona,Spain(TGC
2008, LNCS vol. 5474); and in Munich, Germany (TGC 2010, LNCS vol. 6084).
FurthereditionsofTGCwereheldinAachen,Germany(TGC2011,LNCSvol.7173)
and inNewcastle upon Tyne, UK (TGC 2012, LNCS vol. 8191).
TGC 2013 solicited contributions in all areas of global computing, including (but
not limited to) theories, languages, models, and algorithms; language concepts and
abstraction mechanisms; security, trust, privacy, and reliability; resource usage and
information flow policies; software development and software principles; model
checkers, theorem provers, and static analyzers.
TGC 2013 carried out a fruitful collaboration with CONCUR 2013. Concurrent
submissions to CONCUR and TGC were allowed, with the reviewing schedule of
TGCslightlydelayedwithrespectofthatofCONCUR.Reviewsweresharedbetween
CONCUR and TGC. Submissions accepted by CONCUR were automatically with-
drawn from TGC. In all, 18 papers were concurrently submitted to CONCUR and
TGC, out of which four were accepted by CONCUR and 14 were subject to further
evaluation by TGC. Several of the papers rejected by CONCUR were found suitable
for TGC, in part becauseof differences inevaluation criteria, and inpart because the
VI Preface
timeline of TGC gave authors several additional months to produce final versions of
their work.
In addition to those concurrent submissions, TGC 2013 received 15 TGC-only
submissions. In order to guarantee the fairness and quality of the selection process,
each submission received at least three reviews.
The Program Committee selected 15 papers to be included in this volume and be
presented at the symposium. The program was structured in sessions named
‘‘Security,’’ ‘‘Pi-calculus,’’ ‘‘Information Flow,’’ ‘‘Models,’’ ‘‘Specifications, and
Proofs,’’ and ‘‘Quantitative Analysis,’’ chaired by Ugo Montanari, Mohammad Reza
Mousavi, Hernán Melgratti, and Joost-Pieter Katoen.
Additionally, the program included three invited lectures:
– Luca de Alfaro (UC Santa Cruz, USA)
– Nobuko Yoshida (Imperial College London, UK)
– Jane Hillston (University of Edinburgh, UK)
All the invited speakers were encouraged to contribute a paper related to their
lectures for these proceedings.
WewouldliketothanktheSteeringCommitteeofTGCforinvitingustochairthe
conference;theProgramCommitteemembersandexternalreferees,fortheirdetailed
reports and the stimulating discussions during the review phase; the authors of sub-
mitted papers, the invited speakers, the session chairs, and the attendees, for con-
tributing to the success of the event. We are also grateful to the providers of the
EasyChairsystem,whichwasusedtomanagethesubmissions;toMicrosoftResearch,
for sponsoring the event; and to Hernán Melgratti, Pedro D’Argenio, and the rest of
the organizers of the Buenos Aires Concurrency and Dependability Week.
December 2013 Martín Abadi
Alberto Lluch Lafuente
Organization
Steering Committee
Gilles Barthe IMDEA Software, Madrid, Spain
Rocco De Nicola IMT Institute for Advanced Studies Lucca, Italy
Christos Kaklamanis University of Patras, Greece
Ugo Montanari University of Pisa, Italy
Davide Sangiorgi University of Bologna, Italy
Don Sannella University of Edinburgh, UK
Vladimiro Sassone University of Southampton, UK
Martin Wirsing LMU University of Munich, Germany
Program Committee Chairs
Martín Abadi Microsoft Research and UC Santa Cruz, USA
Alberto Lluch Lafuente IMT Institute for Advanced Studies Lucca, Italy
Program Committee
Gul Agha University of Illinois at Urbana-Champaign, USA
Myrto Arapinis University of Birmingham, UK
Luís Caires Caires Universidade Nova de Lisboa, Portugal
Rocco De Nicola IMT Institute for Advanced Studies Lucca, Italy
José Luiz Fiadeiro Royal Holloway, University of London, UK
Andy Gordon Microsoft Research and University of Edinburgh, UK
Radha Jagadeesan DePaul University, USA
Matteo Maffei Saarland University, Germany
Sergio Maffeis Imperial College London, UK
Catuscia Palamidessi Inria and École Polytechnique, France
Frank Pfenning Carnegie Mellon University, USA
Sriram Rajamani Microsoft Research, India
Tamara Rezk Inria, France
Alejandro Russo Chalmers University of Technology, Sweden
Davide Sangiorgi University of Bologna, Italy
Carolyn Talcott SRI International, USA
Emilio Tuosto University of Leicester, UK
Sebastian Uchitel University of Buenos Aires and Imperial College London,
Argentina/UK
Martin Wirsing LMU University of Munich, Germany
VIII Organization
Additional Reviewers
Castellani, Ilaria Mohsen, Rabih
Charalambides, Minas Vandin, Andrea
Giachino, Elena Viswanathan, Mahesh
Hennessy, Matthew
Contents
Invited Papers
Content-Driven Reputation for Collaborative Systems. . . . . . . . . . . . . . . . . 3
Luca de Alfaro and Bo Adler
Challenges for Quantitative Analysis of Collective Adaptive Systems. . . . . . 14
Jane Hillston
The Scribble Protocol Language. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Nobuko Yoshida, Raymond Hu, Rumyana Neykova, and Nicholas Ng
Security
Dynamic Measurement and Protected Execution: Model and Analysis . . . . . 45
Shiwei Xu, Ian Batten, and Mark Ryan
Security Correctness for Secure Nested Transactions. . . . . . . . . . . . . . . . . . 64
Dominic Duggan and Ye Wu
p-Calculus
Types for Resources in w-calculi . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Hans Hüttel
A Sorted Semantic Framework for Applied Process Calculi
(Extended Abstract) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Johannes Borgström, Ramu¯nas Gutkovas, Joachim Parrow,
Björn Victor, and Johannes Åman Pohjola
Timed p-Calculus. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Neda Saeedloei and Gopal Gupta
Towards Static Deadlock Resolution in the p-Calculus . . . . . . . . . . . . . . . . 136
Marco Giunti and António Ravara
Information Flow
Fine-Grained and Coarse-Grained Reactive Noninterference . . . . . . . . . . . . 159
Pejman Attar and Ilaria Castellani
InformationFlowAnalysisforValued-IndexedDataSecurityCompartments... 180
Luísa Lourenço and Luís Caires
X Contents
A Library for Removing Cache-Based Attacks in Concurrent
Information Flow Systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Pablo Buiras, Amit Levy, Deian Stefan, Alejandro Russo,
and David Mazières
Models, Specifications, and Proofs
Specification of Asynchronous Component Systems
with Modal I/O-Petri Nets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 219
Serge Haddad, Rolf Hennicker, and Mikael H. Møller
A Formal Model for the Deferred Update Replication Technique. . . . . . . . . 235
Andrea Corradini, Leila Ribeiro, Fernando Dotti,
and Odorico Mendizabal
Studying Operational Models of Relaxed Concurrency . . . . . . . . . . . . . . . . 254
Gustavo Petri
Certificates and Separation Logic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 273
Martin Nordio, Cristiano Calcagno, and Bertrand Meyer
Quantitative Analysis
On-the-fly Fast Mean-Field Model-Checking. . . . . . . . . . . . . . . . . . . . . . . 297
Diego Latella, Michele Loreti, and Mieke Massink
Group-by-Group Probabilistic Bisimilarities and Their Logical
Characterizations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 315
Marco Bernardo, Rocco De Nicola, and Michele Loreti
Author Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 331