Secure protocol composition

Proceedings of the ACM Workshop on Formal Methods in Security Engineering

Volumn , Issue , 2003, Pages 11-23

  Datta, Anupam ^a   Derek, Ante ^a   Mitchell, John C ^a   Pavlovic, Dusko ^b  

^a Stanford University   (United States)

^b KESTREL INSTITUTE   (United States)

Author keywords

Invariants; Logic; Protocol Composition; Security Protocols

Indexed keywords

CONSTRAINT THEORY; DATA REDUCTION; FORMAL LOGIC; NETWORK PROTOCOLS; OPTIMIZATION; PUBLIC KEY CRYPTOGRAPHY;

PROOF SYSTEMS; PROTOCOL COMPOSITION; PROTOCOL PROPERTIES; PUBLIC KEY PROTOCOLS; SECURITY PROTOCOLS;

SECURITY OF DATA;

EID: 2642548302     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1035429.1035431     Document Type: Conference Paper

References (38)

1. M. Abadi and A. Gordon. A calculus for cryptographic protocols: the spi calculus. Information and Computation, 148(1):1-70, 1999. Expanded version available as SRC Research Report 149 (January 1998).
2. M. Abadi and A. Gordon. A calculus for cryptographic protocols: the spi calculus. Information and Computation, 148(1):1-70, 1999. Expanded version available as SRC Research Report 149 (January 1998).
3. M. Bellare and P. Rogaway. Entity authentication and key distribution. In Advances in Cryprtology - Crypto '93 Proceedings. Springer-Verlag, 1994.
4. G. Berry and G. Boudol. The chemical abstract machine. Theoretical Computer Science, 96:217-248, 1992.
5. R. Canetti, C. Meadows, and P. Syverson. Environmental requirements for authentication protocols. In Proceedings of Software Security - Theories and Systems, Mext-NSF-JSPS International Symposium, ISSS, LNCS 2609, pages 339-355. Springer-Verlag, 2003.
6. A. Datta, A. Derek, J. G. Mitchell, and D. Pavlovic. A derivation system for security protocols and its logical formalization. In Proceedings of 16th IEEE Computer Security Foundations Workshop, pages 109-125. IEEE, 2003.
7. W. Diffie and M. E. Hellman. New directions in cryptography. IEEE Transactions on Information Theory, IT-22(6):644-654, 1976.
8. W. Diffie, P. C. Van Oorschot, and M. J. Wiener. Authentication and authenticated key exchanges. Designs, Codes and Cryptography, 2:107-125, 1992.
9. D. Dolev and A. Yao. On the security of public-key protocols. IEEE Transactions on Information Theory, 2(29), 1983.
10. N. Durgin, J. C. Mitchell, and D. Pavlovic. A compositional logic for protocol correctness. In Proceedings of 14th IEEE Computer Security Foundations Workshop, pages 241-255. IEEE, 2001.
11. F. J. T. Fábrega, J. C. Herzog, and J. D. Guttman. Strand spaces: Why is a security protocol correct? In Proceedings of the 1998 IEEE Symposium on Security and Privacy, pages 160-171, Oakland, CA, May 1998. IEEE Computer Society Press.
12. L. Gong and P. Syverson. Fail-stop protocols: An approach to designing secure protocols. Dependable Computing for Critical Applications, 5:79-100, 1998.
13. J. Guttman and F. J. T. Fábrega. Protocol independence through disjoint encryption. In Proceedings of 13th IEEE Computer Security Foundations Workshop, pages 24-34. IEEE, 2000.
14. D. Harkins and D. Carrel. The Internet Key Exchange (IKE), 1998. RFC 2409.
15. N. Heintze and J. D. Tygar. A model for secure protocols and their composition. IEEE Transactions on Software Engineering, 22(1):16-30, January 1996.
16. IEEE. Entity authentication mechanisms - part 3: Entity authentication using asymmetric techniques. Technical report ISO/IEC IS 9798-3, ISO/IEC, 1993.
17. J. Kelsey, B. Schneier, and D. Wagner. Protocol interactions and the chosen protocol attack. In Proceedings of the International Workshop on Security Protocols, April 1997.
18. G. Lowe. Breaking and fixing the Needham-Schroeder public-key protocol using CSP and FDR. In 2nd International Workshop on Tools and Algorithms for the Construction and Analysis of Systems. Springer-Verlag, 1996.
19. N. Lynch. I/O automata models and proofs for shared-key communication systems. In Proceedings of 12th IEEE Computer Security Foundations Workshop, pages 14-29. IEEE, 1999.
20. Z. Manna and A. Pnueli. Temporal Verification of Reactive Systems: Safety. Springer-Verlag, 1995.
21. H. Mantel. On the Composition of Secure Systems. In Proceedings of the IEEE Symposium on Security and Privacy, pages 88-101, Oakland, CA, USA, May 12-15 2002. IEEE Computer Society.
22. D. McCullough. Noninterference and the composability of security properties. In Proceedings of the IEEE Symposium on Security and Privacy, pages 177-186, Oakland, CA, USA, May 1988. IEEE Computer Society.
23. D. McCullough. A hookup theorem for multilevel security. IEEE Transactions on Software Engineering, 16(6):563-568, 1990.
24. J. McLean. Security models and information flow. In Proceedings of the IEEE Symposium on Security and Privacy, Oakland, CA, USA, May 1990. IEEE Computer Society.
25. J. McLean. A general theory of composition for a class of "possibilistic" properties. IEEE Transactions on Software Engineering, 22(1):53-67, 1996.
26. C. Meadows. A model of computation for the NRL protocol analyzer. In Proceedings of 7th IEEE Computer Security Foundations Workshop, pages 84-89. IEEE, 1994.
27. C. Meadows. The NRL protocol analyzer: An overview. Journal of Logic Programming, 26(2):113-131, 1996.
28. C. Meadows. Analysis of the Internet Key Exchange protocol using the NRL protocol analyzer. In Proceedings of the IEEE Symposium on Security and Privacy. IEEE, 1998.
29. A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone. Handbook of Applied Cryptography. CRC Press, 1996.
30. R. Milner. Action structures. LFCS report ECS-LFCS-92-249, Department of Computer Science, University of Edinburgh, JCMB, The Kings Buildings, Mayfield Road, Edinburgh, December 1992.
31. R. Milner. Action calculi and the pi-calculus. In NATO Summer School on Logic and Computation, Marktoberdorf, November 1993.
32. R. Milner. Communicating and Mobile Systems: The π-Calculus. Cambridge University Press, Cambridge, U.K, 1999.
33. R.M. Needham and M.D. Schroeder. Using encryption for authentication in large networks of computers. Communications of the ACM, 21(12):993-999, 1978.
34. D. Pavlovic. Categorical logic of names and abstraction in action calculi. Math. Structures in Comp. Sci., 7(6):619-637, 1997.
35. D. Peled. Software Reliability Methods. Springer-Verlag, 2001.
36. P. Syverson and C. Meadows. A formal language for cryptographic protocol requirements. Designs, Codes and Cryptography, 7(1-2):27-59, 1996.
37. F. J. Thayer, J. C. Herzog, and J. D. Guttman. Mixed strand spaces. In Proceedings of 12th IEEE Computer Security Foundations Workshop. IEEE, 1999.
38. T. Y. C. Woo and S. C. Lam. A semantic model for authentication protocols. In Proceedings IEEE Symposium on Research in Security and Privacy, 1993.