verigraph/src/it/polito/verigraph/mcnet/netobjs/PolitoVpnAccess.java

   1 /*******************************************************************************
   2  * Copyright (c) 2017 Politecnico di Torino and others.
   3  *
   4  * All rights reserved. This program and the accompanying materials
   5  * are made available under the terms of the Apache License, Version 2.0
   6  * which accompanies this distribution, and is available at
   7  * http://www.apache.org/licenses/LICENSE-2.0
   8  *******************************************************************************/
   9 package it.polito.verigraph.mcnet.netobjs;
  10
  11 import java.util.ArrayList;
  12 import java.util.List;
  13
  14 import com.microsoft.z3.BoolExpr;
  15 import com.microsoft.z3.Context;
  16 import com.microsoft.z3.DatatypeExpr;
  17 import com.microsoft.z3.Expr;
  18 import com.microsoft.z3.FuncDecl;
  19 import com.microsoft.z3.IntExpr;
  20 import com.microsoft.z3.Solver;
  21
  22 import it.polito.verigraph.mcnet.components.NetContext;
  23 import it.polito.verigraph.mcnet.components.Network;
  24 import it.polito.verigraph.mcnet.components.NetworkObject;
  25
  26 public class PolitoVpnAccess extends NetworkObject {
  27
  28     List<BoolExpr> constraints = new ArrayList<BoolExpr>();
  29     DatatypeExpr politoVpnAccess;
  30     FuncDecl private_addr_func;
  31     NetContext nctx;
  32     Context ctx;
  33     Network net;
  34
  35     public PolitoVpnAccess(Context ctx, Object[]... args) {
  36         super(ctx, args);
  37     }
  38
  39     @Override
  40     public DatatypeExpr getZ3Node() {
  41         return politoVpnAccess;
  42     }
  43
  44     @Override
  45     protected void init(Context ctx, Object[]... args) {
  46         this.ctx = ctx;
  47         this.isEndHost = false;
  48         this.politoVpnAccess = this.z3Node = ((NetworkObject)args[0][0]).getZ3Node();
  49         this.net = (Network)args[0][1];
  50         this.nctx = (NetContext)args[0][2];
  51     }
  52
  53     @Override
  54     protected void addConstraints(Solver solver) {
  55         BoolExpr[] constr = new BoolExpr[constraints.size()];
  56         solver.add(constraints.toArray(constr));
  57     }
  58
  59     public void vpnAccessModel(DatatypeExpr vpnAccessIp, DatatypeExpr vpnExitIp) {
  60         Expr x = ctx.mkConst("vpn_x", nctx.node);
  61         Expr y = ctx.mkConst("vpn_y", nctx.node);
  62
  63         Expr p_0 = ctx.mkConst("vpn_p_0", nctx.packet);
  64         Expr p_1 = ctx.mkConst("vpn_p_1", nctx.packet);
  65
  66         IntExpr t_0 = ctx.mkIntConst("vpn_t_0");
  67         IntExpr t_1 = ctx.mkIntConst("vpn_t_1");
  68
  69         private_addr_func = ctx.mkFuncDecl("vpn_private_addr_func", nctx.address, ctx.mkBoolSort());
  70
  71         BoolExpr constraint1 = ctx.mkForall(new Expr[]{t_0, p_0, x},
  72                 ctx.mkImplies(ctx.mkAnd(
  73                         (BoolExpr)nctx.send.apply(politoVpnAccess, x, p_0, t_0),
  74                         ctx.mkEq(nctx.pf.get("inner_src").apply(p_0), nctx.am.get("null"))),
  75                         ctx.mkAnd(
  76                                 (BoolExpr)private_addr_func.apply(nctx.pf.get("dest").apply(p_0)),
  77                                 ctx.mkNot((BoolExpr)nctx.pf.get("encrypted").apply(p_0)),
  78                                 ctx.mkExists(new Expr[]{y, p_1, t_1},
  79                                         ctx.mkAnd((BoolExpr)nctx.recv.apply(y, politoVpnAccess, p_1, t_1),
  80                                                 ctx.mkLt(t_1, t_0),
  81                                                 (BoolExpr)nctx.pf.get("encrypted").apply(p_1),
  82                                                 ctx.mkEq(nctx.pf.get("src").apply(p_1), vpnExitIp),
  83                                                 ctx.mkEq(nctx.pf.get("dest").apply(p_1), vpnAccessIp),
  84                                                 ctx.mkEq(nctx.pf.get("inner_src").apply(p_1), nctx.pf.get("src").apply(p_0)),
  85                                                 ctx.mkEq(nctx.pf.get("inner_dest").apply(p_1), nctx.pf.get("dest").apply(p_0)),
  86                                                 ctx.mkEq(nctx.pf.get("origin").apply(p_1), nctx.pf.get("origin").apply(p_0)),
  87                                                 ctx.mkEq(nctx.pf.get("orig_body").apply(p_1), nctx.pf.get("orig_body").apply(p_0)),
  88                                                 ctx.mkEq(nctx.pf.get("body").apply(p_1), nctx.pf.get("body").apply(p_0)),
  89                                                 ctx.mkEq(nctx.pf.get("seq").apply(p_1), nctx.pf.get("seq").apply(p_0)),
  90                                                 ctx.mkEq(nctx.pf.get("proto").apply(p_1), nctx.pf.get("proto").apply(p_0)),
  91                                                 ctx.mkEq(nctx.pf.get("emailFrom").apply(p_1), nctx.pf.get("emailFrom").apply(p_0)),
  92                                                 ctx.mkEq(nctx.pf.get("url").apply(p_1), nctx.pf.get("url").apply(p_0)),
  93                                                 ctx.mkEq(nctx.pf.get("options").apply(p_1), nctx.pf.get("options").apply(p_0))), 1, null, null, null, null))),
  94                 1,null,null,null,null);
  95
  96         constraints.add(constraint1);
  97
  98         BoolExpr constraint2 = ctx.mkForall(new Expr[]{t_0, p_0, x},
  99                 ctx.mkImplies(ctx.mkAnd(
 100                         (BoolExpr)nctx.send.apply(politoVpnAccess, x, p_0, t_0),
 101                         ctx.mkNot(ctx.mkEq(nctx.pf.get("inner_src").apply(p_0), nctx.am.get("null")))),
 102                         ctx.mkAnd(
 103                                 ctx.mkEq(nctx.pf.get("src").apply(p_0), vpnAccessIp),
 104                                 ctx.mkEq(nctx.pf.get("dest").apply(p_0), vpnExitIp),
 105                                 (BoolExpr)private_addr_func.apply(nctx.pf.get("inner_src").apply(p_0)),
 106                                 ctx.mkNot(ctx.mkEq(nctx.pf.get("inner_dest").apply(p_0), vpnAccessIp)),
 107                                 (BoolExpr)nctx.pf.get("encrypted").apply(p_0),
 108                                 ctx.mkExists(new Expr[]{y, p_1, t_1},
 109                                         ctx.mkAnd((BoolExpr)nctx.recv.apply(y, politoVpnAccess, p_1, t_1),
 110                                                 ctx.mkLt(t_1, t_0),
 111                                                 ctx.mkNot((BoolExpr)nctx.pf.get("encrypted").apply(p_1)),
 112                                                 ctx.mkEq(nctx.pf.get("src").apply(p_1), nctx.pf.get("inner_src").apply(p_0)),
 113                                                 ctx.mkEq(nctx.pf.get("dest").apply(p_1), nctx.pf.get("inner_dest").apply(p_0)),
 114                                                 ctx.mkEq(nctx.pf.get("inner_src").apply(p_1), nctx.am.get("null")),
 115                                                 ctx.mkEq(nctx.pf.get("inner_dest").apply(p_1), nctx.am.get("null")),
 116                                                 ctx.mkEq(nctx.pf.get("origin").apply(p_1), nctx.pf.get("origin").apply(p_0)),
 117                                                 ctx.mkEq(nctx.pf.get("orig_body").apply(p_1), nctx.pf.get("orig_body").apply(p_0)),
 118                                                 ctx.mkEq(nctx.pf.get("body").apply(p_1), nctx.pf.get("body").apply(p_0)),
 119                                                 ctx.mkEq(nctx.pf.get("seq").apply(p_1), nctx.pf.get("seq").apply(p_0)),
 120                                                 ctx.mkEq(nctx.pf.get("proto").apply(p_1), nctx.pf.get("proto").apply(p_0)),
 121                                                 ctx.mkEq(nctx.pf.get("emailFrom").apply(p_1), nctx.pf.get("emailFrom").apply(p_0)),
 122                                                 ctx.mkEq(nctx.pf.get("url").apply(p_1), nctx.pf.get("url").apply(p_0)),
 123                                                 ctx.mkEq(nctx.pf.get("options").apply(p_1), nctx.pf.get("options").apply(p_0))), 1, null, null, null, null))),
 124                 1,null,null,null,null);
 125
 126         constraints.add(constraint2);
 127     }
 128
 129     public void setInternalAddress(ArrayList<DatatypeExpr> internalAddress){
 130         List<BoolExpr> constr = new ArrayList<BoolExpr>();
 131         Expr n_0 = ctx.mkConst("vpn_node", nctx.address);
 132
 133         for(DatatypeExpr n : internalAddress){
 134             constr.add(ctx.mkEq(n_0,n));
 135         }
 136         BoolExpr[] constrs = new BoolExpr[constr.size()];
 137         //Constraintprivate_addr_func(n_0) == or(n_0==n foreach internal address)
 138         constraints.add(ctx.mkForall(new Expr[]{n_0}, ctx.mkEq(private_addr_func.apply(n_0),ctx.mkOr(constr.toArray(constrs))),1,null,null,null,null));
 139     }
 140
 141 }