Model checking SPKI/SDSI

Journal of Computer Security

Volumn 12, Issue 3-4 SPEC. ISS., 2004, Pages 317-353

  Jha, S ^a   Reps, T ^a  

^a University of Wisconsin Madison   (United States)

Author keywords

Authorization; Certificate chain discovery; Certificate set analysis; Model checking; Naming; Pushdown system; SPKI SDSI

Indexed keywords

ALGORITHMS; COMPUTATIONAL METHODS; DISTRIBUTED COMPUTER SYSTEMS; HIERARCHICAL SYSTEMS; MATHEMATICAL MODELS; PUBLIC KEY CRYPTOGRAPHY; SEMANTICS;

AUTHORIZATION; CERTIFICATE CHAIN DISCOVERY; CERTIFICATE SET ANALYSIS; MODEL CHECKING; NAMING; PUSHDOWN SYSTEMS; SPKI/SDSI;

SECURITY OF DATA;

EID: 3042565619     PISSN: 0926227X     EISSN: None     Source Type: Journal    
DOI: 10.3233/jcs-2004-123-402     Document Type: Conference Paper

References (27)

1. M. Abadi, On SDSI's linked local name spaces, Journal of Computer Security 6(1-2) (1998), 3-21.
2. R. Alur, K. Etessami and M. Yannakakis, Analysis of recursive state machines, in: Proc. Computer-Aided Verif., 2001.
3. R. Alur and M. Yannakakis, Model checking of hierarchical state machines, Volume 23 of Software Engineering Notes, New York, ACM Press, 1998, pp. 175-188.
4. M. Benedikt, P. Godefroid and T. Reps, Model checking of unrestricted hierarchical state machines, in: ICALP '01, 2001.
5. M. Blaze, J. Feigenbaum, J. Ioannidis and A.D. Keromytis, The KeyNote trust-management system version 2, RFC 2704, September 1999.
6. M. Blaze, J. Feigenbaum, J. Ioannidis and A.D. Keromytis, The role of trust management in distributed systems security, in: Secure Internet Programming: Security Issues for Mobile and Distributed Objects, Vitek and Jensen, eds, LNCS 1603, 1999, pp. 185-210.
7. R.F. Book and F. Otto, String-Rewriting Systems, Springer, 1993.
8. A. Bouajjani, J. Esparza and O. Maler, Reachability analysis of pushdown automata: Application to model checking, in: Proc. CONCUR, Volume 1243 of Lec. Notes in Comp. Sci., Springer-Verlag, 1997, pp. 135-150.
9. J.R. Büchi, Finite Automata, Their Algebras and Grammars, Springer, 1988.
10. O. Burkart and B. Steffen, Model checking for context-free processes, in: Proc. CONCUR, Volume 630 of Lec. Notes in Comp. Sci., Springer-Verlag, 1992, pp. 123-137.
11. D. Caucal, On the regular structure of prefix rewriting, Theoretical Computer Science 106 (1992), 61-86.
12. D. Clarke, J.-E. Elien, C.M. Ellison, M. Fredette, A. Morcos and R.L. Rivest, Certficate chain discovery in SPKI/SDSI, Journal of Computer Security 9 (2001), 285-322.
13. E.M. Clarke, O. Grumberg and D. Peled, Model Checking, MIT Press, 2000.
14. J.-E. Elien, Certificate discovery using SPKI/SDSI 2.0 certificates, Master's thesis, Massachusetts Institute of Technology, May 1998.
15. C. Ellison, Personal communication to S. Jha, T. Reps and S. Schwoon, April 2003.
16. C.M. Ellison, B. Frantz, B. Lampson, R.L. Rivest, B.M. Thomas and T. Ylonen, SPKI certificate theory, RFC 2693, September 1999.
17. J. Esparza, D. Hansel, P. Rossmanith and S. Schwoon, Efficient algorithms for model checking pushdown systems, in: Proc. Computer-Aided Verif., Volume 1855 of Lec. Notes in Comp. Sci., Springer-Verlag, 2000, pp. 232-247.
18. R. Gerth, D. Peled, M. Vardi and P. Wolper, Simple on-the-fly automatic verification of linear temporal logic, in: Protocol Specification Testing and Verification, Chapman & Hall, Warsaw, Poland, 1995, pp. 3-18.
19. J.Y. Halpern and R.V.D. Meyden, A logical reconstruction of SPKI, in: Proceedings of the 14th IEEE Computer Security Foundations Workshop, IEEE Computer Society Press, 2001, pp. 59-70.
20. J. Howell and D. Kotz, A formal semantics for SPKI, Technical Report 2000-363, Department of Computer Science, Dartmouth College, Hanover, NH, March 2000.
21. J. Knoop, Demand-driven model checking for context-free processes, in: Proc. Asian Comp. Sci. Conf., Volume 1742 of Lec. Notes in Comp. Sci., P.S. Thiagarajan and R. Yap, eds, Springer-Verlag, 1999, pp. 201-213.
22. N. Li and J.C. Mitchell, Understanding SPKI/SDSI using first-order logic, in: Comp. Sec. Found. Workshop, IEEE Comp. Soc., Wash., DC, 2003.
23. N. Li, W.H. Winsborough and J.C. Mitchell, Distributed credential chain discovery in trust management. Journal of Computer Security 2002.
24. N. Li, Local names in SPKI/SDSI 2.0, in: Proceedings of the 13th IEEE Computer Security Foundations Workshop, 2000.
25. S. Schwoon, Model-checking pushdown systems, PhD thesis, University of Munich, Munich, Germany, July 2002.
26. S. Schwoon, S. Jha, T. Reps and S. Stubblebine, On generalized authorization problems, in: Comp. Sec. Found. Workshop, IEEE Comp. Soc., Wash., DC, 2003.
27. S. Weeks, Understanding trust management systems, in: Proceedings of the IEEE Symposium on Research in Security and Privacy, Research in Security and Privacy, Oakland, CA, IEEE Computer Society, Technical Committee on Security and Privacy, IEEE Computer Society Press, 2001.