Efficient finite-state analysis for large security protocols

Shmatikov, Vitaly; Stern, Ulrich

doi:10.1109/csfw.1998.683160

Cited by 32 publications

(37 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In [9], the authors prove the soundness of two optimizations for the intruder model. The first optimization technique lets the intruder always intercepting messages sent by the honest protocol participants, instead of making such interception optional.…”

Section: Related Workmentioning

confidence: 99%

“…Existing intruder models [6,9,29,31,33], whether they are based on mere state space exploration or whether they combine it with natural deduction-style reasoning or "lazy" evaluation, delimit the state space branching by exploiting information about the messages that protocol participants expect. This optimization avoids generating from the intruder's knowledge, fake messages that cannot have an effect in the protocol's execution, if every protocol participant rejects them as unexpected.…”

Section: Related Workmentioning

confidence: 99%

“…Some techniques [9] exploit certain properties that have been identified as characteristics of security protocols, but there is also one recent work [10] that proposes a "divide-and-conquer" approach for reducing the amount of memory needed. A broad family of state space reduction techniques adopts a symbolic representation of the state space, in order to avoid to explicitly enumerating all possible messages that the intruder can generate.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An intruder model with message inspection for model checking security protocols

Basagiannis

Katsaros

Pombortsis

2010

Computers & Security

View full text Add to dashboard Cite

Model checking security protocols is based on an intruder model that represents the eavesdropping or interception of the exchanged messages, while at the same time performs attack actions against the ongoing protocol session(s). Any attempt to enumerate all messages that can be deduced by the intruder and the possible actions in all protocol steps results in an enormous branching of the model's state space. In current work, we introduce a new intruder model that can be exploited for state space reduction, optionally in combination with known techniques, such as partial order and symmetry reduction. The proposed intruder modeling approach called Message Inspection (MI) is based on enhancing the intruder's knowledge with metadata for the exchanged messages. In a preliminary simulation run, the intruder tags the analyzed messages with protocol-specific values for a set of predefined parameters. This metadata is used to identify possible attack actions, for which it is a priori known that they cannot cause a security violation. The MI algorithm selects attack actions that can be discarded, from an open-ended base of primitive attack actions. Thus, model checking focuses only on attack actions that may disclose a security violation. The most interesting consequence is a non negligible state-space pruning, but at the same time our approach also allows customizing the behavior of the intruder model, in order e.g. to make it appropriate for model checking problems that involve liveness. We provide experimental results obtained with the SPIN model checker, for the Needham Schroeder security protocol.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

An intruder model with message inspection for model checking security protocols

Basagiannis

Katsaros

Pombortsis

2010

Computers & Security

View full text Add to dashboard Cite

show abstract

“…Indeed, many examples of correctness of a security protocolas well as the discovery of attacks on them-may be found in the literature, e.g., [2,3,4,5,6,7,8]. Furthermore, several formal techniques have been developed.…”

Section: Introductionmentioning

confidence: 99%

“…These analysis tools are not the most recent, but they have been extensively used, also to analyze large case studies. They are Murφ and FDR, respectively [7] and [9].…”

Section: Introductionmentioning

confidence: 99%

Formal analysis of some secure procedures for certificate delivery

Martinelli¹,

Petrocchi²,

Vaccarelli³

2006

Softw. Test. Verif. Reliab.

View full text Add to dashboard Cite

Abstract. The paper describes and formally analyzes two communication protocols to manage the secure emission of digital certificates. The formal analysis is carried out by means of a software tool for the automatic verification of cryptographic protocols with finite behaviour. The tool is able to discover, at a conceptual level, attacks against security procedures. The methodology is general enough to be applied to several kinds of cryptographic procedures and protocols. It is opinion of the authors that this survey contributes towards a better understanding of the structure and aims of a protocol, both for developers, analyzers and final users.

show abstract

Evolutionary Approach in the Security Protocols Design

Ocenasek

Ec2nd 2005

View full text Add to dashboard Cite

Efficient finite-state analysis for large security protocols

Cited by 32 publications

References 6 publications

An intruder model with message inspection for model checking security protocols

An intruder model with message inspection for model checking security protocols

Formal analysis of some secure procedures for certificate delivery

Evolutionary Approach in the Security Protocols Design

Contact Info

Product

Resources

About