Securing statically-verified communications protocols against timing attacks

Electronic Notes in Theoretical Computer Science

Volumn 128, Issue 4, 2005, Pages 123-143

  Buchholtz, Mikael ^a   Gilmore, Stephen ^b   Hillston, Jane ^b   Nielson, Flemming ^a  

^a TECHNICAL UNIVERSITY OF DENMARK   (Denmark)

^b UNIVERSITY OF EDINBURGH   (United Kingdom)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; DATA PROCESSING; INFORMATION RETRIEVAL; MATHEMATICAL MODELS; NETWORK PROTOCOLS; PROGRAM COMPILERS; RANDOM PROCESSES;

FEDERATED ANALYSIS; IMPERIAL PEPA COMPILER; MESSAGE AUTHENTICATION; TIMING ATTACKS;

SECURITY OF DATA;

EID: 17744377974     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2005.01.016     Document Type: Article

References (23)

1. Agat, J., Transforming out timing leaks, in: Proceedings of the 27th Annual ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages, Boston, Massachusetts, 2000
2. Agat, J. and D. Sands, On confidentiality and algorithms, in: Proceedings of the IEEE Symposium on Security and Privacy (2001), pp. 64-77
3. Argent-Katwala, A., J. Bradley and N. Dingle, Expressing performance requirements using regular expressions to specify stochastic probes over process algebra models, in: Proceedings of the Fourth International Workshop on Software and Performance (2004), pp. 49-58
4. Bodei, C., M. Buchholtz, P. Degano, F. Nielson and H. Nielson, Automatic validation of protocol narration, in: Proceedings of the 16th IEEE Computer Security Foundations Workshop (CSFW'03) (2003), pp. 1-15
5. Bradley, J., N. Dingle, S. Gilmore and W. Knottenbelt, Derivation of passage-time densities in PEPA models using IPC: The Imperial PEPA Compiler, in: G. Kotsis, editor, Proceedings of the 11th IEEE/ACM International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunications Systems (2003), pp. 344-351
6. J. Bradley, N. Dingle, S. Gilmore, and W. Knottenbelt Extracting passage times from PEPA models with the HYDRA tool: A case study S. Jarvis Proceedings of the Nineteenth annual UK Performance Engineering Workshop 2003 University of Warwick 79 90
7. J. Bradley, N. Dingle, P. Harrison, and W. Knottenbelt Distributed computation of passage time quantiles and transient state distributions in large semi-Markov models Proceedings of International Workshop on Performance Modeling, Evaluation, and Optimization of Parallel and Distributed Systems (PMEO-PDS 2003), Nice, France, April 26 2003 2003 281 289 URL http://aesop.doc.ic.ac.uk/pubs/passage-pmeo2003/
8. Brumley, D. and D. Boneh, Remote timing attacks are practical, in: Conference proceedings of the 12th USENIX Security Symposium (2003), pp. 1-14, available online at http://www.usenix.org/publications/library/proceedings/sec03/tech/brumley.html
9. M. Buchholtz LySa - a process calculus Web site hosted by Informatics and Mathematical Modelling at the Technical University of Denmark http://www.imm.dtu.dk/cs_LySa/ 2004
10. M. Buchholtz, C. Montangero, L. Perrone, and S. Semprini For-LySa: UML for authentication analysis to appear. URL http://www.imm.dtu.dk/pubdb/p.php?3235 2004
11. M. Buchholtz, H. Nielson, and F. Nielson A calculus for control flow analysis of security protocols International Journal of Information Security 2004 available online at http://dx.doi.org/10.1007/s10207-004-0036-x
12. M. Burrows, M. Abadi, and R. Needham A logic of authentication ACM Transactions on Computing Systems 8 1990 18 36
13. C. Canevet, S. Gilmore, J. Hillston, M. Prowse, and P. Stevens Performance modelling with UML and stochastic process algebras IEE Proceedings: Computers and Digital Techniques 150 2003 107 120
14. Dolev, D. and A. Yao, On the security of public key protocols, in: 22nd Annual Symposium on Foundations of Computer Science (1981), pp. 350-357
15. R. Focardi, and R. Gorrieri Classification of security properties. Part I: Information flow Foundations of Security Analysis and Design LNCS 2171 2001 331 396
16. R. Focardi, R. Gorrieri, and F. Martinelli Real-time information flow analysis IEEE Journal on Selected Areas in Communications 21 2003 20 35
17. R. Gorrieri, and F. Martinelli A simple framework for real-time cryptographic protocol analysis with compositional proof rules Science of Computer Programming 50 2004 23 49
18. J. Hillston A Compositional Approach to Performance Modelling 1996 Cambridge University Press
19. Knottenbelt, W., "Generalised Markovian analysis of timed transition systems," Master's thesis, University of Cape Town (1996)
20. P.C. Kocher Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems N. Koblitz Advances in Cryptology 1996 104 113
21. F. Nielson, H.R. Nielson, and H. Seidl A succinct solver for ALFP Nordic Journal of Computing 9 2002 335 372
22. H.R. Nielson, and F. Nielson Flow logic: a multi-paradigmatic approach to static analysis The Essence of Computation: Complexity, Analysis, Transformation LNCS 2566 2002 Springer 223 244
23. Volpano, D. and G. Smith, Probabilistic noninterference in a concurrent language, in: Proceedings of the 11th IEEE Computer Security Foundations Workshop, 1998, pp. 34-43