verigraph/service/src/mcnet/netobjs/PolitoNat.java

   1 /*******************************************************************************
   2  * Copyright (c) 2017 Politecnico di Torino and others.
   3  *
   4  * All rights reserved. This program and the accompanying materials
   5  * are made available under the terms of the Apache License, Version 2.0
   6  * which accompanies this distribution, and is available at
   7  * http://www.apache.org/licenses/LICENSE-2.0
   8  *******************************************************************************/
   9
  10 package mcnet.netobjs;
  11
  12
  13 import java.util.ArrayList;
  14 import java.util.List;
  15
  16 import com.microsoft.z3.BoolExpr;
  17 import com.microsoft.z3.Context;
  18 import com.microsoft.z3.DatatypeExpr;
  19 import com.microsoft.z3.Expr;
  20 import com.microsoft.z3.FuncDecl;
  21 import com.microsoft.z3.IntExpr;
  22 import com.microsoft.z3.Solver;
  23
  24 import mcnet.components.NetContext;
  25 import mcnet.components.Network;
  26 import mcnet.components.NetworkObject;
  27 /**
  28  * NAT Model object
  29  *
  30  */
  31 public class PolitoNat extends NetworkObject{
  32         List<BoolExpr> constraints;
  33         Context ctx;
  34         DatatypeExpr nat;
  35         List<DatatypeExpr> private_addresses;
  36         List<NetworkObject> private_node;
  37         Network net;
  38         NetContext nctx;
  39         FuncDecl private_addr_func ;
  40
  41         public PolitoNat(Context ctx, Object[]... args) {
  42                 super(ctx, args);
  43         }
  44
  45         @Override
  46         protected void init(Context ctx, Object[]... args) {
  47                 this.ctx = ctx;
  48                 isEndHost=false;
  49                 constraints = new ArrayList<BoolExpr>();
  50         z3Node = ((NetworkObject)args[0][0]).getZ3Node();
  51         nat = z3Node;
  52         net = (Network)args[0][1];
  53         nctx = (NetContext)args[0][2];
  54         private_addresses = new ArrayList<DatatypeExpr>();
  55         private_node = new ArrayList<NetworkObject>();
  56         net.saneSend(this);
  57     }
  58
  59         @Override
  60         public DatatypeExpr getZ3Node() {
  61                 return nat;
  62         }
  63
  64         @Override
  65         protected void addConstraints(Solver solver) {
  66                         BoolExpr[] constr = new BoolExpr[constraints.size()];
  67                     solver.add(constraints.toArray(constr));
  68         }
  69
  70         /*
  71         private void addPrivateAdd(List<DatatypeExpr> address){
  72                 private_addresses.addAll(address);
  73         }
  74         */
  75
  76         public List<DatatypeExpr> getPrivateAddress(){
  77                 return private_addresses;
  78         }
  79
  80     public void natModel(DatatypeExpr natIp){
  81         Expr x = ctx.mkConst("x", nctx.node);
  82         Expr y = ctx.mkConst("y", nctx.node);
  83         Expr z = ctx.mkConst("z", nctx.node);
  84
  85         Expr p_0 = ctx.mkConst("p_0", nctx.packet);
  86         Expr p_1 = ctx.mkConst("p_1", nctx.packet);
  87         Expr p_2 = ctx.mkConst("p_2", nctx.packet);
  88
  89         IntExpr t_0 = ctx.mkIntConst("t_0");
  90         IntExpr t_1 = ctx.mkIntConst("t_1");
  91         IntExpr t_2 = ctx.mkIntConst("t_2");
  92
  93 //      private_addr_func = ctx.mkFuncDecl("private_addr_func", nctx.address, ctx.mkBoolSort());
  94         private_addr_func = ctx.mkFuncDecl(nat + "_nat_func", nctx.address, ctx.mkBoolSort());
  95
  96         //Constraint1
  97 //      "send(nat, x, p_0, t_0) && !private_addr_func(p_0.dest) ->
  98 //      p_0.src == ip_politoNat &&
  99 //      (exist y, p_1,t_1 :
 100 //         (recv(y, nat, p_1, t_1) && t_1 < t_0 &&
 101 //          private_addr_func(p1.src) &&
 102 //          p_1.origin == p_0.origin &&
 103 //          same for p_1.<dest,orig_body,body,seq,proto,emailFrom,url,options> == p_0.<...>) "
 104         constraints.add( ctx.mkForall(new Expr[]{t_0, p_0, x},
 105                 ctx.mkImplies(
 106                                 ctx.mkAnd((BoolExpr)nctx.send.apply(nat, x, p_0, t_0),
 107                                                 ctx.mkNot((BoolExpr)private_addr_func.apply(nctx.pf.get("dest").apply(p_0)))),
 108                                 ctx.mkAnd(
 109                                                 ctx.mkEq(nctx.pf.get("src").apply(p_0),natIp),
 110                                                 ctx.mkExists(new Expr[]{y, p_1, t_1},
 111                                                                 ctx.mkAnd(
 112                                                                         (BoolExpr)nctx.recv.apply(y, nat, p_1, t_1),
 113                                                                         ctx.mkLt(t_1 , t_0),
 114                                                                         (BoolExpr)private_addr_func.apply(nctx.pf.get("src").apply(p_1)),
 115                                                                         ctx.mkEq(nctx.pf.get("origin").apply(p_1),nctx.pf.get("origin").apply(p_0)),
 116                                                                         ctx.mkEq(nctx.pf.get("dest").apply(p_1),nctx.pf.get("dest").apply(p_0)),
 117                                                                         ctx.mkEq(nctx.pf.get("orig_body").apply(p_1),nctx.pf.get("orig_body").apply(p_0)),
 118                                                                         ctx.mkEq(nctx.pf.get("body").apply(p_1),nctx.pf.get("body").apply(p_0)),
 119                                                                         ctx.mkEq(nctx.pf.get("seq").apply(p_1),nctx.pf.get("seq").apply(p_0)),
 120                                                                         ctx.mkEq(nctx.pf.get("proto").apply(p_1),nctx.pf.get("proto").apply(p_0)),
 121                                                                         ctx.mkEq(nctx.pf.get("emailFrom").apply(p_1),nctx.pf.get("emailFrom").apply(p_0)),
 122                                                                         ctx.mkEq(nctx.pf.get("url").apply(p_1),nctx.pf.get("url").apply(p_0)),
 123                                                                         ctx.mkEq(nctx.pf.get("options").apply(p_1),nctx.pf.get("options").apply(p_0))),1,null,null,null,null))),1,null,null,null,null));
 124
 125         //Constraint2
 126 //      send(nat, x, p_0, t_0) && private_addr_func(p_0.dest) ->
 127 //      !private_addr_func(p_0.src) &&
 128 //      (exist y, p_1,t_1 :
 129 //        (recv(y, nat, p_1, t_1) && t_1 < t_0 &&
 130 //         !private_addr_func(p1.src) &&
 131 //         p_1.dest == ip_politoNat &&
 132 //         p_1.origin == p_0.origin &&
 133 //         same for p_1.<src,orig_body,body,seq,proto,emailFrom,url,options> == p_0.<...>)
 134         constraints.add( ctx.mkForall(new Expr[]{x, p_0, t_0},
 135                         ctx.mkImplies(
 136                                 ctx.mkAnd((BoolExpr)nctx.send.apply(nat, x, p_0, t_0),
 137                                         (BoolExpr)private_addr_func.apply(nctx.pf.get("dest").apply(p_0))),
 138                                         ctx.mkAnd(
 139                                                 ctx.mkNot((BoolExpr)private_addr_func.apply(nctx.pf.get("src").apply(p_0))),
 140                                                 ctx.mkExists(new Expr[]{y, p_1, t_1},
 141                                                         ctx.mkAnd(
 142                                                                         ctx.mkLt(t_1 , t_0),
 143                                                                         (BoolExpr)nctx.recv.apply(y, nat, p_1, t_1),
 144                                                                         ctx.mkNot((BoolExpr)private_addr_func.apply(nctx.pf.get("src").apply(p_1))),
 145                                                                         ctx.mkEq(nctx.pf.get("dest").apply(p_1),natIp),
 146                                                                         ctx.mkEq(nctx.pf.get("src").apply(p_1),nctx.pf.get("src").apply(p_0)),
 147                                                                         ctx.mkEq(nctx.pf.get("origin").apply(p_0),nctx.pf.get("origin").apply(p_1)),
 148                                                                         ctx.mkEq(nctx.pf.get("orig_body").apply(p_1),nctx.pf.get("orig_body").apply(p_0)),
 149                                                                         ctx.mkEq(nctx.pf.get("body").apply(p_1),nctx.pf.get("body").apply(p_0)),
 150                                                                         ctx.mkEq(nctx.pf.get("seq").apply(p_1),nctx.pf.get("seq").apply(p_0)),
 151                                                                         ctx.mkEq(nctx.pf.get("proto").apply(p_1),nctx.pf.get("proto").apply(p_0)),
 152                                                                         ctx.mkEq(nctx.pf.get("emailFrom").apply(p_1),nctx.pf.get("emailFrom").apply(p_0)),
 153                                                                         ctx.mkEq(nctx.pf.get("url").apply(p_1),nctx.pf.get("url").apply(p_0)),
 154                                                                         ctx.mkEq(nctx.pf.get("options").apply(p_1),nctx.pf.get("options").apply(p_0)),
 155                                                                         ctx.mkExists(new Expr[]{z, p_2, t_2},
 156                                                                                 ctx.mkAnd(
 157                                                                                                 ctx.mkLt(t_2 , t_1),
 158                                                                                                 (BoolExpr)nctx.recv.apply(z, nat, p_2, t_2),
 159                                                                                                 (BoolExpr)private_addr_func.apply(nctx.pf.get("src").apply(p_2)),
 160                                                                                                 ctx.mkEq(nctx.pf.get("src").apply(p_1),nctx.pf.get("dest").apply(p_2)),
 161                                                                                                 ctx.mkEq(nctx.pf.get("src").apply(p_0),nctx.pf.get("dest").apply(p_2)),
 162                                                                                                 ctx.mkEq(nctx.pf.get("src").apply(p_2),nctx.pf.get("dest").apply(p_0))),1,null,null,null,null)),1,null,null,null,null))),1,null,null,null,null));
 163     }
 164
 165     public void setInternalAddress(ArrayList<DatatypeExpr> internalAddress){
 166         List<BoolExpr> constr = new ArrayList<BoolExpr>();
 167         Expr n_0 = ctx.mkConst("nat_node", nctx.address);
 168
 169         for(DatatypeExpr n : internalAddress){
 170                 constr.add(ctx.mkEq(n_0,n));
 171         }
 172         BoolExpr[] constrs = new BoolExpr[constr.size()];
 173         //Constraint            private_addr_func(n_0) == or(n_0==n foreach internal address)
 174         constraints.add(ctx.mkForall(new Expr[]{n_0}, ctx.mkEq(private_addr_func.apply(n_0),ctx.mkOr(constr.toArray(constrs))),1,null,null,null,null));
 175     }
 176 }