arrow
返回

A Formal Specification and Verification Framework for Timed Security Protocols

delete2018-08-01
delete13
delete
OA
AI
L
Li Li *
孙俊 封面图
孙俊 (Jun Sun)
刘
刘洋 (Yang Liu)
M
Meng Sun
J
Jin Song Dong
DOI:10.1109/TSE.2017.2712621delete
delete原文链接
delete分享
delete收藏
查看原文
摘要

摘要

En 中文
Nowadays, protocols often use time to provide better security. For instance, critical credentials are often associated with expiry dates in system designs. However, using time correctly in protocol design is challenging, due to the lack of time related formal specification and verification techniques. Thus, we propose a comprehensive analysis framework to formally specify as well as automatically verify timed security protocols. A parameterized method is introduced in our framework to handle timing parameters whose values cannot be decided in the protocol design stage. In this work, we first propose timed applied pi-calculus as a formal language for specifying timed security protocols. It supports modeling of continuous time as well as application of cryptographic functions. Then, we define its formal semantics based on timed logic rules, which facilitates efficient verification against various authentication and secrecy properties. Given a parameterized security protocol, our method either produces a constraint on the timing parameters which guarantees the security property satisfied by the protocol, or reports an attack that works for any parameter value. The correctness of our verification algorithm has been formally proved. We evaluate our framework with multiple timed and untimed security protocols and successfully find a previously unknown timing attack in Kerberos V.
Keyword:
Timed security protocol
timed applied pi-calculus
parameterized verification
secrecy and authentication
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

IEEE Transactions on Software Engineering 封面图
IEEE Transactions on Software Engineering
IF:
5.6
论文数:
2.9K
被引数:
1.1W

机构

S
singapore university of technology & design
学者数:
2.8K
论文数: 3.6K
被引数: 5
N
Nanyang Technological University
学者数:
4.9W
论文数: 4.8W
被引数: 8.1W
P
peking university
学者数:
11.9W
论文数: 8.7W
被引数: 146
N
National University of Singapore
学者数:
7.6W
论文数: 6.5W
被引数: 11.4W
学者 查看更多机构
引用论文

引用论文

Characterization of Phospholipids in Membrane Vesicles Derived fromPseudomonas aeruginosa
err2014-05-22
err0
errOAAI
errYosuke TASHIRO; Aya INAGAKI; Motoyuki SHIMIZU; Sosaku ICHIKAWA; Naoki TAKAYA; Toshiaki NAKAJIMA-KAMBE; Hiroo UCHIYAMA; Nobuhiko NOMURA
err分享
err收藏
Squatting Exercises in Older Adults: Kinematic and Kinetic Comparisons
err2003-04-01
err0
errOAAI
errSEAN FLANAGAN; GEORGE J. SALEM; MAN-YING WANG; SERENA E. SANKER; GAIL A. GREENDALE
err分享
err收藏
err分享
err收藏
学者 查看更多内容