Shared resource matrix methodology
Richard A. Kemmerer · ACM Transactions on Computer Systems · 1983
Recognizing and dealing with storage and timing channels when performing the security analysis of a computer system is an elusive task.Methods for discovering and dealing with these channels have mostly been informal, and formal methods have been restricted to a particular specification language.A methodology for discovering storage and timing channels that can be used through all phases of the software life cycle to increase confidence that all channels have been identified is presented.The methodology is presented and applied to an example system having three different descriptions: English, formal specification, and high-order language implementation.