A Method for Patching Interleaving-Replay Attacks in Faulty Security Protocols

Raúl Monroy Borja

dc.creator	Raúl Monroy Borja
dc.date	2007
dc.date.accessioned	2018-10-18T22:08:24Z
dc.date.available	2018-10-18T22:08:24Z
dc.identifier.issn	15710661
dc.identifier.doi	10.1016/j.entcs.2006.12.034
dc.identifier.uri	http://hdl.handle.net/11285/630573
dc.description	The verification of security protocols has attracted a lot of interest in the formal methods community, yielding two main verification approaches: i) state exploration, e.g. FDR [Gavin Lowe. Breaking and fixing the needham-schroeder public-key protocol using FDR. In TACAs'96: Proceedings of the Second International Workshop on Tools and Algorithms for Construction and Analysis of Systems, pages 147-166, London, UK, 1996. Springer-Verlag] and OFMC [A.D. Basin, S. Mödersheim, and L. Viganò. An on-the-fly model-checker for security protocol analysis. In D. Gollmann and E. Snekkenes, editors, ESORICS'03: 8th European Symposium on Research in Computer Security, number 2808 in Lecture Notes in Computer Science, pages 253-270, Gjøvik, Norway, 2003. Springer-Verlag]; and ii) theorem proving, e.g. the Isabelle inductive method [Lawrence C. Paulson. The inductive approach to verifying cryptographic protocols. Journal in Computer Security, 6(1-2):85-128, 1998] and Coral [G. Steel, A. Bundy, and M. Maidl. Attacking the asokan-ginzboorg protocol for key distribution in an ad-hoc bluetooth network using coral. In H. König, M. Heiner, and A. Wolisz, editors, IFIP TC6 /WG 6.1: Proceedings of 23rd IFIP International Conference on Formal Techniques for Networked and Distributed Systems, volume 2767, pages 1-10, Berlin, Germany, 2003. FORTE 2003 (work in progress papers)]. Complementing formal methods, Abadi and Needham's principles aim to guide the design of security protocols in order to make them simple and, hopefully, correct [M. Abadi and R. Needham. Prudent engineering practice for cryptographic protocols. IEEE Transactions on Software Engineering, 22(1):6-15, 1996]. We are interested in a problem related to verification but far less explored: the correction of faulty security protocols. Experience has shown that the analysis of counterexamples or failed proof attempts often holds the key to the completion of proofs and for the correction of a faulty model. In this paper, we introduce a method for patching faulty security protocols that are susceptible to an interleaving-replay attack. Our method makes use of Abadi and Needham's principles for the prudent engineering practice for cryptographic protocols in order to guide the location of the fault in a protocol as well as the proposition of candidate patches. We have run a test on our method with encouraging results. The test set includes 21 faulty security protocols borrowed from the Clark-Jacob library [J. Clark and J. Jacob. A survey of authentication protocol literature: Version 1.0. Technical report, Department of Computer Science, University of York, November 1997. A complete specification of the Clark-Jacob library in CAPSL is available at http://www.cs.sri.com/millen/capsl/]. © 2007.
dc.language	eng
dc.relation	https://www.scopus.com/inward/record.uri?eid=2-s2.0-34249097180&doi=10.1016%2fj.entcs.2006.12.034&partnerID=40&md5=0e801aa21e8f8d1e1e9e97bc4f7d147f
dc.relation	Investigadores
dc.relation	Estudiantes
dc.rights	info:eu-repo/semantics/openAccess
dc.rights.uri	http://creativecommons.org/licenses/by-nc-nd/4.0
dc.source	Electronic Notes in Theoretical Computer Science
dc.subject	Authentication
dc.subject	Electric fault location
dc.subject	Mathematical models
dc.subject	Network protocols
dc.subject	Software engineering
dc.subject	Formal methods
dc.subject	Formal verification
dc.subject	Mobile security
dc.subject	Theorem proving
dc.subject	Verification
dc.subject	Replay attacks
dc.subject	Security protocols
dc.subject	Network security
dc.subject	Network security
dc.subject	Cryptographic protocols
dc.subject	Engineering practices
dc.subject	Fault localization
dc.subject	Inductive method
dc.subject	patching
dc.subject	Replay attack
dc.subject	Security protocols
dc.subject	State exploration
dc.subject.classification	7 INGENIERÍA Y TECNOLOGÍA
dc.title	A Method for Patching Interleaving-Replay Attacks in Faulty Security Protocols
dc.type	Artículo
dc.identifier.volume	174
dc.identifier.issue	4
dc.identifier.startpage	117
dc.identifier.endpage	130
refterms.dateFOA	2018-10-18T22:08:24Z