On the use of data refinement in the development of secure communications systems

Formal Aspects of Computing

Volumn 14, Issue 1, 2002, Pages 2-34

  Butler, Michael ^a  

^a UNIVERSITY OF SOUTHAMPTON   (United Kingdom)

Author keywords

Action systems; B; CSP; Refinement; Security protocols

Indexed keywords

COMMUNICATION SYSTEMS; DATA TRANSFER; NETWORK PROTOCOLS; PROBABILITY; PROBLEM SOLVING; SPECIFICATIONS;

DATA REFINEMENTS;

SECURITY OF DATA;

EID: 0036812203     PISSN: 09345043     EISSN: None     Source Type: Journal    
DOI: 10.1007/s001650200025     Document Type: Article

References (30)

1. [AbM98] Abrial, J.-R. and Mussat, L.: Introducing dynamic constraints in B. In D. Bert, editor, Second International B Conference, April 1998.
2. [Abr96] Abrial, J.R.: The B-Book: Assigning Programs to Meanings. Cambridge University Press, 1996.
3. [BaK83] Back, R.J.R. and Kurki-Suonio, R.: Decentralisation of process nets with centralised control. In 2nd ACM SIGACT-SIGOPS Symposium on Principles of Distributed Computing, pages 131-142, 1983.
4. [BiB94] Bieber, P. and Boulahia-Cuppens, N.: Formal development of authentication protocols. In 6th BCS FACS Refinement Workshop, 1994.
5. [BBL93] Bieber, P., Boulahia-Cuppens, N., Lehmann, T. and van Wickeren, E.: Abstract machines for communication security. In 6th IEEE Computer Security Foundations Workshop, 1993.
6. [BAN90] Burrows, M., Abadi, M. and Needham, R.: A logic of authentication. ACM Transactions on Computer Systems, 8(1):18-36, 1990.
7. [But92] Butler, M.J.: A CSP Approach To Action Systems. D.Phil. thesis, Programming Research Group, Oxford University, 1992.
8. [But96] Butler, M.J.: Stepwise refinement of communicating systems. Science of Computer Programming, 27(2):139-173, September 1996.
9. [But98] Butler, M.J.: Using refinement to analyse the safety of an authentication protocol. DSSE-TR-98-8. Available from http://www.dsse.ecs.soton.ac.uk/techreports/98-8.html, 1998.
10. [But00] Butler, M.J.: csp2B: a practical approach to combining CSP and B. Formal Aspects of Computing, 12:182-198, 2000.
11. [ClJ97] Clark, J. and Jacob, J.: A survey of authentication protocol literature. Available from http://www-users.cs.york.ac. uk/̃jac/papers/drareview.ps.gz, 1997.
12. [CGP99] Clarke, E.M., Grumberg, O. and Peled, D.A.: Model Checking. MIT Press, 1999.
13. [Dij76] Dijkstra, E.W.: A Discipline of Programming. Prentice-Hall, 1976.
14. [GNY90] Gong, L., Needham, R. And Yahalom, R.: Reasoning about belief in cryptographic protocols. In IEEE Symposium on Research in Security and Privacy, 1990.
15. [Hoa85] Hoare, C.A.R.: Communicating Sequential Processes. Prentice-Hall, 1985.
16. [Low95] Lowe, G.: An attack on the Needham-Schroeder public-key authentication protocol. Information Processing Letters, 56(3):131-133, 1995.
17. [Low96] Lowe, G.: Breaking and fixing the Needham-Schroeder public-key protocol using FDR. Software Concepts and Tools, 17:93-102, 1996.
18. [Lyn99] Lynch, N.: I/O automaton models and proofs for shared-key communications systems. In 12th IEEE Computer Security Foundations Workshop, 1999.
19. [MMT98] McIver, A.K., Morgan, C.C. and Troubitsyna, E.: The probabilistic steam boiler: a case study in probabilistic data refinement. In International Refinement Workshop & Formal Methods Pacific '98, pages 250-265. Springer, 1998.
20. [Mea96] Meadows, C.: The NRL protocol analyser. Journal of Logic and Programming, 26(2), 1996.
21. [MCF87] Millen, J.K., Clark, S.C. and Freeman, S.B.: The Interrogator: protocol security analysis. IEEE Transactions on Software Engineering, SE-13(2):274-288, February 1987.
22. [Mor90] Morgan, C.C.: Of wp and CSP. In W.H.J. Feijen, A.J.M. van Gasteren, D. Gries and J. Misra, editors, Beauty is our Business: A Birthday Salute to Edsger W. Dijkstra. Springer, 1990.
23. [MMS96] Morgan, C.C., McIver, A.K. and Seidel, K.: Probabilistic predicate transformers. ACM Transactions on Programming Languages and Systems, 18(3):325-353, 1996.
24. [NeS78] Needham, R. and Schroeder, M.: Using encryption for authentication in large networks of computers. Communications of the ACM, 21(2):120-126, 1978.
25. [OtR87] Otway, D. and Rees, O.: Efficient and timely mutual authentication. Operating Systems Review, 21(1):8-10, 1987.
26. [Pau98] Paulson, L.C.: The inductive approach to verifying cryptographic protocols. Journal of Computer Security, 6:85-128, 1998.
27. [Ros95a] Roscoe, A.W.: CSP and determinism in security modelling. In Proceedings of 1995 IEEE Symposium on Security and Privacy. IEEE Computer Society Press, 1995.
28. [Ros95b] Roscoe, A.W.: Modelling and verifying key-exchange protocols using CSP and FDR. In Proceedings of 8th IEEE Computer Security Foundations Workshop. IEEE Computer Society Press, 1995.
29. [Sch97] Schneider, S.: Verifying authentication protocols with CSP. In Proceedings of 10th IEEE Computer Security Foundations Workshop, 1997.
30. [Sin97] Sinclair, J.: Action systems for security specifications. Journal of of Computer Security, 5:129-154, 1997.