On preventing type flaw attacks on security protocols with a simplified tagging scheme

Journal of Information Science and Engineering

Volumn 21, Issue 1, 2005, Pages 59-84

  Yafen, L I ^a   Wuu, Yang ^a   Ching Wei, Huang ^a  

^a NATIONAL CHIAO TUNG UNIVERSITY   (Taiwan)

Author keywords

Network security; Security protocol; Strand space; Tagging; Type flaw

Indexed keywords

COMPUTER NETWORKS; COMPUTER OPERATING SYSTEMS; COMPUTER SCIENCE; CRYPTOGRAPHY; HIERARCHICAL SYSTEMS; SECURITY OF DATA;

NETWORK SECURITY; SECURITY PROTOCOL; STRAND SPACE; TAGGING; TYPE FLAW;

NETWORK PROTOCOLS;

EID: 12744277366     PISSN: 10162364     EISSN: None     Source Type: Journal    
DOI: None     Document Type: Article

References (9)

1. U. Carlsen, "Cryptographic protocol flaws: know your enemy," in Proceedings of Computer Security Foundations Workshop VII, 1994, pp. 192-200.
2. F. J. T. Fabrega, J. C. Herzog, and J. D. Guttman, "Strand spaces: why is a security protocol correct?" in Proceedings of 1998 IEEE Symposium on Security and Privacy, 1998, pp. 160-171.
3. J. Heather, G. Lowe, and S. Schneider, "How to prevent type flaw attacks on security protocols," in Proceedings of 13th IEEE Computer Security Foundations Workshop, 2000, pp. 255-268.
4. G. Lowe, "A hierarchy of authentication specifications," in Proceedings of 10th Computer Security Foundations Workshop, 1997, pp. 31-43.
5. C. A. Meadows, "Analyzing the Needham-Schroder public-key protocol: a comparison of two approaches," in E. Bertino, H. Kurth, G. Martella, and E. Montolivo, ed., ESORICS '96, LNCS 1146, 1996, pp. 351-346.
6. R. Needham and M. Schroeder, "Using encryption for authentication in large networks of computers," Communications of the ACM, Vol. 21, 1978, pp. 993-999.
7. B. C. Neuman and S. G. Stubblebine, "A note on the use of timestamps as nonces," ACM Operating Systems Reviews, Vol. 27, 1993, pp. 10-14.
8. L. C. Paulson, "Proving security protocols correct," in Proceedings of 14th Symposium on Logic in Computer Science, 1999, pp. 370-381.
9. T. Y. C. Woo and S. S. Lam, "A lesson on authentication protocol design," ACM Operating Systems Reviews, Vol. 28, 1994, pp. 24-37.