Verified interoperable implementations of security protocols

Proceedings of the Computer Security Foundations Workshop

Volumn 2006, Issue , 2006, Pages 139-152

  Bhargavan, Karthikeyan ^a   Fournet, Cédric ^a   Gordon, Andrew D ^a   Tse, Stephen ^b  

^a MICROSOFT RESEARCH   (United States)

^b UNIVERSITY OF PENNSYLVANIA   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHIC ALGORITHMS; CRYPTOGRAPHIC PROTOCOLS; INTEROPERABILITY TESTING; SECURITY PROTOCOLS;

ALGORITHMS; COMPUTER ARCHITECTURE; CRYPTOGRAPHY; INTEROPERABILITY; PROGRAM DEBUGGING; VERIFICATION; WEB SERVICES;

INTERNET PROTOCOLS;

EID: 33947683919     PISSN: 10636900     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/CSFW.2006.32     Document Type: Conference Paper

References (40)

1. M. Abadi and C. Fournet. Mobile values, new names, and secure communication. In 28th ACM Symposium on Principles of Programming Languages (POPL'01), pages 104-115, 2001.
2. M. Abadi and A. D. Gordon. A calculus for cryptographic protocols: The spi calculus. Information and Computation, 148:1-70, 1999.
3. M. Abadi and P. Rogaway. Reconciling two views of cryptography (the computational soundness of formal encryption). Journal of Cryptology, 15(2):103-127, 2002.
4. X. Allamigeon and B. Blanchet. Reconstruction of attacks against cryptographic protocols. In 18th IEEE Computer Security Foundations Workshop (CSFW'05), pages 140-154, 2005.
5. A. Askarov and A. Sabelfeld. Security-typed languages for implementation of cryptographic protocols: A case study. In 10th European Symposium on Research in Computer Security (ESORICS'05), volume 3679 of LNCS, pages 197-221. Springer, 2005.
6. M. Backes, B. Pfitzmann, and M. Waidner. A composable cryptographic library with nested operations. In Proceedings of the 10th ACM Conference on Computer and Communications Security (CCS'03), pages 220-230. ACM Press, 2003.
7. K. Bhargavan, R. Corin, C. Fournet, and A. D. Gordon. Secure sessions for web services. In 2004 ACM Workshop on Secure Web Services (SWS), pages 11-22, Oct. 2004.
8. K. Bhargavan, C. Fournet, and A. D. Gordon. Verifying policy-based security for web services. In 11th ACM Conference on Computer and Communications Security (CCS'04), pages 268-277, Oct. 2004.
9. K. Bhargavan, C. Fournet, and A. D. Gordon. A semantics for web services authentication. Theoretical Comput. Sci., 340(1):102-153, June 2005.
10. K. Bhargavan, C. Fournet, A. D. Gordon, and R. Pucella. TulaFale: A security tool for web services. In International Symposium on Formal Methods for Components and Objects (FMCO'03), volume 3188 of LNCS, pages 197-222. Springer, 2004.
11. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. Technical Report MSR-TR-2006-46, Microsoft Research, 2006.
12. B. Blanchet. An efficient cryptographic protocol verifier based on Prolog rules. In 14th IEEE Computer Security Foundations Workshop (CSFW'01), pages 82-96, 2001.
13. B. Blanchet, M. Abadi, and C. Fournet. Automated verification of selected equivalences for security protocols. In 20th IEEE Symposium on Logic in Computer Science (LICS'05), pages 331-340, 2005.
14. B. Blanchet and A. Podelski. Verification of cryptographic protocols: Tagging enforces termination. Theoretical Computer Science, 333(1-2):67-90, 2005.
15. D. Box, F. Curbera, et al. Web Services Addressing (WS-Addressing), Aug. 2004. W3C Member Submission.
16. D. Dolev and A. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, IT-29(2):198-208, 1983.
17. D. Eastlake, J. Reagle, et al. XML Encryption Syntax and Processing, 2002. W3C Recommendation.
18. D. Eastlake, J. Reagle, D. Solo, et al. XML-Signature Syntax and Processing, 2002. W3C Recommendation.
19. Galois Connections. Cryptol Reference Manual, 2005.
20. P. Giambiagi and M. Dam. On the secure implementation of security protocols. Science of Computer Programming, 50:73-99, 2004.
21. A. D. Gordon and R. Pucella. Validating a web service security abstraction by typing. In 2002 ACM workshop on XML Security, pages 18-29, 2002.
22. J. Goubault-Larrecq and F. Parrennes. Cryptographic protocol analysis on real C code. In 6th International. Conference on Verification, Model Checking and Abstract Interpretation (VMCAI'05), volume 3385 of LNCS, pages 363-379. Springer, 2005.
23. M. Gudgin et al. SOAP Version 1.2, 2003. W3C Recommendation.
24. J. D. Guttman, J. C. Herzog, J. D. Ramsdell, and B. T. Sniffen. Programming cryptographic protocols. In Trusted Global Computing (TGC'05), volume 3705 of LNCS, pages 116-145. Springer, 2005.
25. E. Kleiner and A. W. Roscoe. Web services security: A preliminary study using Casper and FDR. In Automated Reasoning for Security Protocol Analysis (ARSPA 04), 2004.
26. E. Kleiner and A. W. Roscoe. On the relationship between web services security and traditional protocols. In Mathematical Foundations of Programming Semantics (MFPS XXI), 2005.
27. S. Lukell, C. Veldman, and A. C. M. Hutchison. Automated attack analysis and code generation in a multi-dimensional security protocol engineering framework. In Southern African Telecommunication Networks and Applications Conference (SATNAC), 2003.
28. Microsoft Corporation. Web Services Enhancements (WSE) 2.0, 2004. At http://msdn.microsoft.com/webservices/building/wse/default.aspx.
29. R. Milner. Functions as processes. Mathematical Structures in Computer Science, 2(2):119-141, 1992.
30. R. Milner. Communicating and Mobile Systems: the π-Calculus. CUP, 1999.
31. F. Muller and J. Millen. Cryptographic protocol generation from CAPSL. Technical Report SRI-CSL-01-07, SRI, 2001.
32. A. Nadalin, C. Kaler, P. Hallam-Baker, and R. Monzillo. OASIS Web Services Security: SOAP Message Security 1.0 (WS-Security 2004), Mar. 2004. OASIS Standard 200401.
33. R. Needham and M. Schroeder. Using encryption for authentication in large networks of computers. Commun. ACM, 21(12):993-999, 1978.
34. D. Otway and O. Rees. Efficient and timely mutual authentication. Operation Systems Review, 21(1):8-10, 1987.
35. A. Perrig, D. Song, and D. Phan. AGVI - automatic generation, verification, and implementation of security protocols. In 13th Conference on Computer Aided Verification (CAV), LNCS, pages 241-245. Springer, 2001.
36. D. Pozza, R. Sisto, and L. Durante. Spi2Java: automatic cryptographic protocol Java code generation from spi calculus. In 18th International Conference on Advanced Information Networking and Applications (AINA 2004), volume 1, pages 400-405, 2004.
37. E. Sumii and B. C. Pierce. Logical relations for encryption. In 14th IEEE Computer Security Foundations Workshop (CSFW'01), pages 256-269, 2001.
38. E. Sumii and B. C. Pierce. A bisimulation for dynamic sealing. In 31st ACM Symposium on Principles of Programming Languages (POPL'04), pages 161-172, 2004.
39. D. Syme. F#, 2005. At http://research, microsoft.com/projects/ilx/fsharp. aspx.
40. T. Woo and S. Lam. A semantic model for authentication protocols. In IEEE Computer Society Symposium on Research in Security and Privacy, pages 178-194, 1993.