{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,4]],"date-time":"2025-06-04T04:17:37Z","timestamp":1749010657966,"version":"3.41.0"},"reference-count":45,"publisher":"Association for Computing Machinery (ACM)","issue":"4","license":[{"start":{"date-parts":[[2016,7,1]],"date-time":"2016-07-01T00:00:00Z","timestamp":1467331200000},"content-version":"unspecified","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0"}],"funder":[{"DOI":"10.13039\/501100000921","name":"European Cooperation in Science and Technology","doi-asserted-by":"publisher","award":["IC1201"],"award-info":[{"award-number":["IC1201"]}],"id":[{"id":"10.13039\/501100000921","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Form. Asp. Comput."],"published-print":{"date-parts":[[2016,7]]},"abstract":"<jats:title>Abstract<\/jats:title><jats:p>We present a comprehensive model of structured communications in which self-adaptation and security concerns are jointly addressed. More specifically, we propose a model of multiparty, self-adaptive communications with access control and secure information flow guarantees. In our model, multiparty protocols (choreographies) are described as global types; security violations occur when process implementations of protocol participants attempt to read or write messages of inappropriate security levels within directed exchanges. Such violations trigger adaptation mechanisms that prevent the violations to occur and\/or to propagate their effect in the choreography. Our model is equipped with local and global adaptation mechanisms for reacting to security violations of different gravity; type soundness results ensure that the overall multiparty protocol is still correctly executed while the system adapts itself to preserve the participants\u2019 security.<\/jats:p>","DOI":"10.1007\/s00165-016-0381-3","type":"journal-article","created":{"date-parts":[[2016,6,20]],"date-time":"2016-06-20T05:27:18Z","timestamp":1466400438000},"page":"669-696","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":15,"title":["Self-adaptation and secure information flow in multiparty communications"],"prefix":"10.1145","volume":"28","author":[{"given":"Ilaria","family":"Castellani","sequence":"first","affiliation":[{"name":"INRIA Sophia Antipolis, Valbonne, France"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3341-0941","authenticated-orcid":false,"given":"Mariangiola","family":"Dezani-Ciancaglini","sequence":"additional","affiliation":[{"name":"Universit\u00e0 di Torino, Turin, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1452-6180","authenticated-orcid":false,"given":"Jorge A.","family":"P\u00e9rez","sequence":"additional","affiliation":[{"name":"University of Groningen, Groningen, The Netherlands"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","reference":[{"key":"e_1_2_1_2_1_2","doi-asserted-by":"crossref","unstructured":"Austin TH Flanagan C (2012) Multiple facets for dynamic information flow. In: POPL 2012. ACM Press New York pp 165\u2013178.","DOI":"10.1145\/2103621.2103677"},{"key":"e_1_2_1_2_2_2","doi-asserted-by":"crossref","unstructured":"Askarov A Sabelfeld A (2009) Tight enforcement of information-release policies for dynamic languages. In: CSF 2009. IEEE Computer Society New York pp 43\u201359","DOI":"10.1109\/CSF.2009.22"},{"key":"e_1_2_1_2_3_2","doi-asserted-by":"crossref","unstructured":"Bugliesi M Castagna G Crafa S (2004) Access control for mobile agents: the calculus of boxed ambients. In: ACM Trans Programm Lang Syst 26(1):57\u2013124","DOI":"10.1145\/963778.963781"},{"key":"e_1_2_1_2_4_2","doi-asserted-by":"crossref","unstructured":"Bono V Capecchi S Castellani I Dezani-Ciancaglini M (2012) A reputation system for multirole sessions. In: TGC 2011. LNCS vol 7173. Springer Berlin pp 1\u201324.","DOI":"10.1007\/978-3-642-30065-3_1"},{"key":"e_1_2_1_2_5_2","doi-asserted-by":"crossref","unstructured":"Bhargavan K Corin R Deni\u00e9lou P Fournet C Leifer JJ (2009) Cryptographic protocol synthesis and verification for multiparty sessions. In: CSF 2009. IEEE Computer Society New York pp 124\u2013140","DOI":"10.1109\/CSF.2009.26"},{"key":"e_1_2_1_2_6_2","doi-asserted-by":"crossref","unstructured":"Bocchi L Chen T Demangeon R Honda K Yoshida N (2013) Monitoring networks through multiparty session types. In: FMOODS\/FORTE 2013. LNCS vol 7892. Springer Berlin pp 50\u201365","DOI":"10.1007\/978-3-642-38592-6_5"},{"key":"e_1_2_1_2_7_2","doi-asserted-by":"crossref","unstructured":"Bartoletti M Castellani I Deni\u00e9lou P Dezani-Ciancaglini M Ghilezan S Pantovic J P\u00e9rez JA Thiemann P Toninho B Torres Vieira H (2015) Combining behavioural types with security analysis. J Log Algebr Methods Programm 84(6):763\u2013780 (Special Issue on Open Problems in Concurrency Theory)","DOI":"10.1016\/j.jlamp.2015.09.003"},{"key":"e_1_2_1_2_8_2","doi-asserted-by":"crossref","unstructured":"Bruni R Corradini A Gadducci F Lluch-Lafuente A Vandin A (2012) A conceptual framework for adaptation. In: FASE 2012. LNCS vol 7212. Springer Berlin pp 240\u2013254","DOI":"10.1007\/978-3-642-28872-2_17"},{"key":"e_1_2_1_2_9_2","doi-asserted-by":"crossref","unstructured":"Bravetti M Carbone M Hildebrandt TT Lanese I Mauro J P\u00e9rez JA Zavattaro G (2014) Towards global and local types for adaptation. In: SEFM 2013. LNCS vol 8368. Springer Berlin pp 3\u201314","DOI":"10.1007\/978-3-319-05032-4_1"},{"key":"e_1_2_1_2_10_2","doi-asserted-by":"crossref","unstructured":"Bravetti M Di Giusto C P\u00e9rez JA Zavattaro G (2012) Adaptable processes. In: Logical methods in computer science 8(4)","DOI":"10.2168\/LMCS-8(4:13)2012"},{"key":"e_1_2_1_2_11_2","doi-asserted-by":"crossref","unstructured":"Bielova N Massacci F (2011) Computer-aided generation of enforcement mechanisms for error-tolerant policies. In: POLICY 2011. IEEE Computer Society Press New York pp 89\u201396","DOI":"10.1109\/POLICY.2011.41"},{"key":"e_1_2_1_2_12_2","doi-asserted-by":"crossref","unstructured":"Boudol G (2009) Secure information flow as a safety property. In: FAST 2008. LNCS vol 5491. Springer Berlin pp 20\u201334","DOI":"10.1007\/978-3-642-01465-9_2"},{"key":"e_1_2_1_2_13_2","doi-asserted-by":"crossref","unstructured":"Bocchi L Yang W Yoshida N (2014) Timed multiparty session types. In: CONCUR 2014. LNCS vol 8704. Springer Berlin pp 419\u2013434","DOI":"10.1007\/978-3-662-44584-6_29"},{"key":"e_1_2_1_2_14_2","doi-asserted-by":"crossref","unstructured":"Capecchi S Castellani I Dezani-Ciancaglini M (2014) Typing access control and secure information flow in sessions. Inf. Comput. 238:68\u2013105","DOI":"10.1016\/j.ic.2014.07.005"},{"key":"e_1_2_1_2_15_2","doi-asserted-by":"crossref","unstructured":"Capecchi S Castellani I Dezani-Ciancaglini M (2015) Information flow safety in multiparty sessions. In: Mathematical structures in computer science. FirstView:1\u201343. doi:10.1017\/S0960129514000619. (Available on CJO2015)","DOI":"10.1017\/S0960129514000619"},{"key":"e_1_2_1_2_16_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11761-014-0171-9"},{"key":"e_1_2_1_2_17_2","doi-asserted-by":"publisher","DOI":"10.1017\/S0960129514000188"},{"key":"e_1_2_1_2_18_2","doi-asserted-by":"crossref","unstructured":"Castellani I Dezani-Ciancaglini M P\u00e9rez JA (2014) Self-adaptation and secure information flow in multiparty structured communications: a unified perspective. In: BEAT 2014. EPTCS vol 162. Open Publishing Association USA pp 9\u201318","DOI":"10.4204\/EPTCS.162.2"},{"key":"e_1_2_1_2_19_2","doi-asserted-by":"publisher","DOI":"10.1145\/2220365.2220367"},{"key":"e_1_2_1_2_20_2","doi-asserted-by":"crossref","unstructured":"Denning DE (1976) A lattice model of secure information flow. Commun ACM 19(5):236\u2013243","DOI":"10.1145\/360051.360056"},{"key":"e_1_2_1_2_21_2","doi-asserted-by":"crossref","unstructured":"Dalla PredaM Giallorenzo S Lanese I Mauro J GabbrielliM (2014) AIOCJ: a choreographic framework for safe adaptive distributed applications. In: SLE 2014. LNCS vol 8706. Springer Berlin pp 161\u2013170","DOI":"10.1007\/978-3-319-11245-9_9"},{"key":"e_1_2_1_2_22_2","doi-asserted-by":"crossref","unstructured":"Devriese D Piessens F (2010) Noninterference through secure multi-execution. In: Security and privacy 2010. IEEE Computer Society USA pp 109\u2013124","DOI":"10.1109\/SP.2010.15"},{"key":"e_1_2_1_2_23_2","doi-asserted-by":"crossref","unstructured":"Di Giusto C P\u00e9rez JA (2013) Disciplined structured communications with consistent runtime adaptation. In: SAC 2013. ACM Press New York pp 1913\u20131918","DOI":"10.1145\/2480362.2480716"},{"key":"e_1_2_1_2_24_2","doi-asserted-by":"crossref","unstructured":"Di Giusto C P\u00e9rez JA (2015) Disciplined structured communications with disciplined runtime adaptation. In: Sci Comput Programm 97:235\u2013265","DOI":"10.1016\/j.scico.2014.04.017"},{"key":"e_1_2_1_2_25_2","doi-asserted-by":"crossref","unstructured":"Di Giusto C Perez JA (2016) An event-based approach to runtime adaptation in communication-centric systems. In: Web services formal methods and behavioral types. LNCS vol 9421. Springer Berlin pp 67\u201385 (Extended version to appear in Formal Aspects of Computing)","DOI":"10.1007\/978-3-319-33612-1_5"},{"key":"e_1_2_1_2_26_2","doi-asserted-by":"crossref","unstructured":"Garralda P Compagnoni AB Dezani-Ciancaglini M (2006) BASS: boxed ambients with safe sessions. In: PPDP 2006. ACM Press New York pp 61\u201372","DOI":"10.1145\/1140335.1140344"},{"key":"e_1_2_1_2_27_2","doi-asserted-by":"publisher","DOI":"10.1007\/s00236-005-0177-z"},{"key":"e_1_2_1_2_28_2","doi-asserted-by":"crossref","unstructured":"H\u00fcttel H Lanese I Vasconcelos VT Caires L Carbone M Deni\u00e9lou P Mostrous D Padovani L Ravara A Tuosto E Torres Vieira H Zavattaro G (2016) Foundations of session types and behavioural contracts. ACM Comput Surv 49(1):3:1\u20133:36","DOI":"10.1145\/2873052"},{"key":"e_1_2_1_2_29_2","doi-asserted-by":"crossref","unstructured":"Honda K Vasconcelos VT Kubo M (1998) Language primitives and type disciplines for structured communication-based programming. In: ESOP 1998. LNCS vol 1381. Springer Berlin pp 22\u2013138","DOI":"10.1007\/BFb0053567"},{"key":"e_1_2_1_2_30_2","doi-asserted-by":"crossref","unstructured":"Honda K Yoshida N Carbone M (2008) Multiparty asynchronous session types. In: POPL 2008. ACM Press New York pp 273\u2013284","DOI":"10.1145\/1328897.1328472"},{"key":"e_1_2_1_2_31_2","doi-asserted-by":"publisher","DOI":"10.1145\/2827695"},{"key":"e_1_2_1_2_32_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-004-0046-8"},{"key":"#cr-split#-e_1_2_1_2_33_2.1","doi-asserted-by":"crossref","unstructured":"Le Guernic G Banerjee A Jensen TP Schmidt DA (2006) Automata-based confidentiality monitoring. In: Springer","DOI":"10.1007\/978-3-540-77505-8_7"},{"key":"#cr-split#-e_1_2_1_2_33_2.2","unstructured":"(ed) ASIAN 2006. LNCS vol 4435 pp 75-89"},{"key":"e_1_2_1_2_34_2","doi-asserted-by":"publisher","DOI":"10.1007\/s11761-012-0125-z"},{"key":"e_1_2_1_2_35_2","doi-asserted-by":"crossref","unstructured":"Myers AC Liskov B (2000) Protecting privacy using the decentralized label model. In: ACM Trans Softw Eng Methodol 9:410\u2013442","DOI":"10.1145\/363516.363526"},{"key":"e_1_2_1_2_36_2","doi-asserted-by":"crossref","unstructured":"Padovani L (2011) Session Types = Intersection Types + Union Types. In: ITRS 2010. EPTCS vol 45. Open Publishing Association USA pp 71\u201389","DOI":"10.4204\/EPTCS.45.6"},{"key":"e_1_2_1_2_37_2","doi-asserted-by":"crossref","unstructured":"Planul J Corin R Fournet C (2009) Secure enforcement for global process specifications. In: CONCUR 2009. LNCS vol 5710. Springer Berlin pp 511\u2013526","DOI":"10.1007\/978-3-642-04081-8_34"},{"key":"e_1_2_1_2_38_2","doi-asserted-by":"publisher","DOI":"10.5555\/509043"},{"key":"e_1_2_1_2_39_2","doi-asserted-by":"publisher","DOI":"10.1145\/596980.596983"},{"key":"e_1_2_1_2_40_2","doi-asserted-by":"crossref","unstructured":"Russo A Sabelfeld A Chudnov A (2009) Tracking information flow in dynamic tree structures. In: ESORICS 2009. LNCS vol 5789. Springer Berlin pp 86\u2013103","DOI":"10.1007\/978-3-642-04444-1_6"},{"key":"e_1_2_1_2_41_2","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353382"},{"key":"e_1_2_1_2_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/JSAC.2002.806121"},{"key":"e_1_2_1_2_43_2","doi-asserted-by":"crossref","unstructured":"Sabelfeld A Russo A (2010) From dynamic to static and back: riding the roller coaster of information-flow control research. In: PSI 2009. LNCS vol 5947. Springer Berlin pp 352\u2013365","DOI":"10.1007\/978-3-642-11486-1_30"},{"key":"e_1_2_1_2_44_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-007-0019-9"}],"container-title":["Formal Aspects of Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/s00165-016-0381-3.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1007\/s00165-016-0381-3\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1007\/s00165-016-0381-3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,3]],"date-time":"2025-06-03T22:14:07Z","timestamp":1748988847000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1007\/s00165-016-0381-3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7]]},"references-count":45,"journal-issue":{"issue":"4","published-print":{"date-parts":[[2016,7]]}},"alternative-id":["10.1007\/s00165-016-0381-3"],"URL":"https:\/\/doi.org\/10.1007\/s00165-016-0381-3","relation":{},"ISSN":["0934-5043","1433-299X"],"issn-type":[{"type":"print","value":"0934-5043"},{"type":"electronic","value":"1433-299X"}],"subject":[],"published":{"date-parts":[[2016,7]]}}}