Hierarchical Colored Petri Nets for Vulnerability Detection in Software Architectures

Maya Benabdelhafid, Kamel Adi, Omer Landry Nguena Timo, Luigi Logrippo, Luigi Logrippo

2025

Abstract

Hierarchical Colored Petri Nets (HCPNs) are a powerful formalism for modeling complex systems. This paper presents a formal approach based on HCPN for vulnerability detection in software architecture. By incorporating model checking and the enhanced computing-timing logic of ASK-CTL queries, the proposed approach enables rigorous security property verification. Through a case study of a hypothetical small library system, we demonstrate how this automated process effectively identifies a critical Access Control vulnerability: a regular user gaining unauthorized access to a function reserved for librarians.

Paper Citation

in Harvard Style

Benabdelhafid M., Adi K., Timo O. and Logrippo L. (2025). Hierarchical Colored Petri Nets for Vulnerability Detection in Software Architectures. In Proceedings of the 22nd International Conference on Security and Cryptography - Volume 1: SECRYPT; ISBN 978-989-758-760-3, SciTePress, pages 523-530. DOI: 10.5220/0013638700003979

in Bibtex Style

@conference{secrypt25,
author={Maya Benabdelhafid and Kamel Adi and Omer Timo and Luigi Logrippo},
title={Hierarchical Colored Petri Nets for Vulnerability Detection in Software Architectures},
booktitle={Proceedings of the 22nd International Conference on Security and Cryptography - Volume 1: SECRYPT},
year={2025},
pages={523-530},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0013638700003979},
isbn={978-989-758-760-3},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 22nd International Conference on Security and Cryptography - Volume 1: SECRYPT
TI - Hierarchical Colored Petri Nets for Vulnerability Detection in Software Architectures
SN - 978-989-758-760-3
AU - Benabdelhafid M.
AU - Adi K.
AU - Timo O.
AU - Logrippo L.
PY - 2025
SP - 523
EP - 530
DO - 10.5220/0013638700003979
PB - SciTePress