Verified reference implementations of WS-security protocols

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4184 LNCS, Issue , 2006, Pages 88-106

  Bhargavan, Karthikeyan ^a   Fournet, Cédric ^a   Gordon, Andrew D ^a  

^a MICROSOFT RESEARCH   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER PROGRAMMING LANGUAGES; INTEROPERABILITY; NETWORK PROTOCOLS; SECURITY SYSTEMS; TELECOMMUNICATION SERVICES; THEOREM PROVING;

FUNCTIONAL PROGRAMMING LANGUAGES; SECURITY PROPERTIES; WEB SERVICES;

WORLD WIDE WEB;

EID: 33845212195     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/11841197_6     Document Type: Conference Paper

References (27)

1. M. Abadi and B. Blanchet. Analyzing security protocols with secrecy types and logic programs, J. ACM, 52(1):102-146, 2005.
2. M. Abadi and C. Fournet. Mobile values, new names, and secure communication. In 28th ACM Symposium on Principles of Programming Languages (POPL'01), pages 104-115, ' 2001.
3. Apache Software Foundation. Apache WSS4J, 2006. At http://ws.apache.org/ wss4j/.
4. K. Bhargavan, R. Corin, C. Fournet, and A. D. Gordon. Secure sessions for web services. In 2004 ACM Workshop on Secure Web Services, pages 11-22, October 2004.
5. K. Bhargavan, C. Fournet, and A. D. Gordon. A semantics for web services authentication. Theoretical Computer Science, 340(1):102-153, June 2005.
6. K. Bhargavan, C. Fournet, A. D. Gordon, and R. Pucella. TulaFale: A security tool for web services. In International Symposium on Formal Methods for Components and Objects (FMCO'03), volume 3188 of LNCS, pages 197-222. Springer, 2004.
7. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In 19th IEEE Computer Security Foundations Workshop (CSFW'06), 2006. To appear.
8. B. Blanchet. An efficient cryptographic protocol verifier based on Prolog rules. In 14th IEEE Computer Security Foundations Workshop (CSFW'Ol), pages 82-96, 2001.
9. B. Blanchet, M. Abadi, and C. Fournet. Automated verification of selected equivalences for security protocols. In 20th IEEE Symposium on Logic in Computer Science (LICS'05), pages 331-340, 2005.
10. D. Box, F. Curbera, et al. Web Services Addressing (WS-Addressing), August 2004. W3C Member Submission.
11. D. Dolev and A. C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, IT-29(2): 198-208, 1983.
12. D. Eastlake, J. Reagle, et al. XML Encryption Syntax and Processing, 2002. W3C Recommendation.
13. D. Eastlake, J. Reagle, D. Solo, et al. XML-Signature Syntax and Processing, 2002. W3C Recommendation.
14. A. D. Gordon and R. Pucella. Validating a web service security abstraction by typing. In 2002 ACM workshop on XML Security, pages 18-29, 2002.
15. J. Goubault-Larrecq and F. Parrennes. Cryptographic protocol analysis on real C code. In 6th International Conference on Verification, Model Checking and Abstract Interpretation (VMCAI'05),volume 3385 of LNCS, pages 363-379. Springer, 2005.
16. M. Gudgin et al. SOAP Version 1.2, 2003. W3C Recommendation.
17. IBM Corporation. IBM WebSphere Application Server, 2006. At http://www.ibm.com/software/websphere/.
18. E. Kleiner and A. W. Roscoe. Web services security: A preliminary study using Casper and FDR. In Automated Reasoning for Security Protocol Analysis (ARSPA 04), 2004.
19. E. Kleiner and A. W. Roscoe. On the relationship between web services security and traditional protocols. In Mathematical Foundations of Programming Semantics (MFPS XXI), 2005.
20. Microsoft Corporation. Web Services Enhancements (WSE) 2.0, 2004. At http://msdn.microsoft.com/webservices/building/wse/default.aspx.
21. Microsoft Corporation. Windows Communication Foundation (WCF), 2006. At http://windowscommunication.net.
22. R. Milner. Functions as processes. Mathematical Structures in Computer Science, 2(2):119-141, 1992.
23. R. Milner. Communicating and Mobile Systems: the π-Calculus. CUP, 1999.
24. A. Nadalin, C. Kaler, P. Hallam-Baker, and R. Monzillo. OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security 2004), March 2004. OASIS Standard 200401.
25. R. M. Needham and M. D. Schroeder. Using encryption for authentication in large networks of computers. Communications of the ACM, 21(12):993-999, 1978.
26. D. Syme. F#, 2005. At http://research.microsoft.com/fsharp/fsharp.aspx.
27. T. Y. C. Woo and S. S. Lam. A semantic model for authentication protocols. In IEEE Computer Society Symposium on Research in Security and Privacy, pages 178-194, 1993.