Composing and decomposing systems under security properties

Abstract

We investigate the formal relationship between separability of processes and the types of non-interference properties they enjoy. Though intuitively appealing, separability-the ability to define a process as a parallel composition of disjoint components-alone cannot adequately prove the absence of information flow. We present a number of laws for the composition of secure systems, and an example to show how such laws can be applied.