{"citation":{"ista":"Bartocci E, Ferrere T, Henzinger TA, Nickovic D, Oliveira da Costa A. 2024. Information-flow interfaces. Formal Methods in System Design.","short":"E. Bartocci, T. Ferrere, T.A. Henzinger, D. Nickovic, A. Oliveira da Costa, Formal Methods in System Design (2024).","ama":"Bartocci E, Ferrere T, Henzinger TA, Nickovic D, Oliveira da Costa A. Information-flow interfaces. Formal Methods in System Design. 2024. doi:10.1007/s10703-024-00447-0","ieee":"E. Bartocci, T. Ferrere, T. A. Henzinger, D. Nickovic, and A. Oliveira da Costa, “Information-flow interfaces,” Formal Methods in System Design. Springer Nature, 2024.","mla":"Bartocci, Ezio, et al. “Information-Flow Interfaces.” Formal Methods in System Design, Springer Nature, 2024, doi:10.1007/s10703-024-00447-0.","chicago":"Bartocci, Ezio, Thomas Ferrere, Thomas A Henzinger, Dejan Nickovic, and Ana Oliveira da Costa. “Information-Flow Interfaces.” Formal Methods in System Design. Springer Nature, 2024. https://doi.org/10.1007/s10703-024-00447-0.","apa":"Bartocci, E., Ferrere, T., Henzinger, T. A., Nickovic, D., & Oliveira da Costa, A. (2024). Information-flow interfaces. Formal Methods in System Design. Springer Nature. https://doi.org/10.1007/s10703-024-00447-0"},"type":"journal_article","date_created":"2024-06-02T22:00:57Z","article_processing_charge":"Yes (via OA deal)","scopus_import":"1","month":"05","date_updated":"2024-06-19T13:52:25Z","title":"Information-flow interfaces","acknowledgement":"This project has received funding from the European Union’s Horizon 2020 research and innovation programme under grant agreement No 956123 and it was funded in part by the Austrian Science Fund (FWF) project W1255-N23, by the Austrian FWF project ZK-35, by the FWF project SpyCoDe 10.55776/F85 and by the ERC-2020-AdG 101020093. This paper extends the text and the results of the manuscript published at FASE 2022 [1].","abstract":[{"text":"Contract-based design is a promising methodology for taming the complexity of developing sophisticated systems. A formal contract distinguishes between assumptions, which are constraints that the designer of a component puts on the environments in which the component can be used safely, and guarantees, which are promises that the designer asks from the team that implements the component. A theory of formal contracts can be formalized as an interface theory, which supports the composition and refinement of both assumptions and guarantees. Although there is a rich landscape of contract-based design methods that address functional and extra-functional properties, we present the first interface theory designed to ensure system-wide security properties. Our framework provides a refinement relation and a composition operation that support both incremental design and independent implementability. We develop our theory for both stateless and stateful interfaces. Additionally, we introduce information-flow contracts where assumptions and guarantees are sets of flow relations. We use these contracts to illustrate how to enrich information-flow interfaces with a semantic view. We illustrate the applicability of our framework with two examples inspired by the automotive domain.","lang":"eng"}],"year":"2024","publication_identifier":{"issn":["0925-9856"],"eissn":["1572-8102"]},"publisher":"Springer Nature","ec_funded":1,"article_type":"original","status":"public","oa_version":"Published Version","department":[{"_id":"ToHe"}],"date_published":"2024-05-23T00:00:00Z","day":"23","publication_status":"epub_ahead","publication":"Formal Methods in System Design","external_id":{"arxiv":["2002.06465"]},"project":[{"grant_number":"101020093","call_identifier":"H2020","_id":"62781420-2b32-11ec-9570-8d9b63373d4d","name":"Vigilant Algorithmic Monitoring of Software"},{"grant_number":"F8502","_id":"34a1b658-11ca-11ed-8bc3-c75229f0241e","name":"Interface Theory for Security and Privacy"}],"author":[{"last_name":"Bartocci","full_name":"Bartocci, Ezio","first_name":"Ezio"},{"full_name":"Ferrere, Thomas","last_name":"Ferrere","orcid":"0000-0001-5199-3143","id":"40960E6E-F248-11E8-B48F-1D18A9856A87","first_name":"Thomas"},{"id":"40876CD8-F248-11E8-B48F-1D18A9856A87","orcid":"0000-0002-2985-7724","last_name":"Henzinger","full_name":"Henzinger, Thomas A","first_name":"Thomas A"},{"first_name":"Dejan","id":"41BCEE5C-F248-11E8-B48F-1D18A9856A87","last_name":"Nickovic","full_name":"Nickovic, Dejan"},{"last_name":"Oliveira da Costa","full_name":"Oliveira da Costa, Ana","orcid":"0000-0002-8741-5799","id":"f347ec37-6676-11ee-b395-a888cb7b4fb4","first_name":"Ana"}],"doi":"10.1007/s10703-024-00447-0","_id":"17094","oa":1,"main_file_link":[{"url":"https://doi.org/10.1007/s10703-024-00447-0","open_access":"1"}],"related_material":{"record":[{"status":"public","id":"11355","relation":"shorter_version"}]},"language":[{"iso":"eng"}],"quality_controlled":"1","user_id":"3E5EF7F0-F248-11E8-B48F-1D18A9856A87"}