On Adversary Models and Compositional Security
The authors present a representative development in the science of security that includes a generic model of computer systems, their security properties and adversaries who actively interfere with such systems. They describe logic-based methods to reason about security properties of a system as a composition of properties of its components, and several successful applications of the method in explaining and predicting attacks in a wide-variety of systems. This paper reports on a representative result in the science of security. In order to explain what they mean by a "Science", they draw an analogy with physics. A physical theory consists of a model of the physical universe. The model should be general, i.e., it should encompass a large class of physical phenomena.