Towards security analyses of an identity federation protocol for web services in convergent networks

Third Advanced International Conference on Telecommunications, AICT 2007

Volumn , Issue , 2007, Pages

  Ter Beek, Maurice ^a   Moiso, Corrado ^b   Petrocchi, Marinella ^c  

^a ISTI CNR   (Italy)

^b TELECOM ITALIA   (Italy)

^c CNR   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; ALGEBRA; IDENTIFICATION (CONTROL SYSTEMS); WEB SERVICES;

SECURITY ASPECTS; SERVICE PROVIDERS;

NETWORK PROTOCOLS;

EID: 34548266564     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/AICT.2007.46     Document Type: Conference Paper

References (29)

1. M. Abadi and A. D. Gordon, "Reasoning about Cryptographic Protocols in the Spi Calculus," in Proc. CONCUR'97, ser. LNCS, vol. 1243. Springer, 1997, pp. 59-73.
2. R. Focardi, R. Gorrieri, and F. Martinelli, "Non Interference for the Analysis of Cryptographic Protocols," in Proc. ICALP'OO, ser. LNCS, vol. 1853. Springer, 2000, pp. 354-372.
3. D. Marchignoli and F. Martinelli, "Automatic Verification of Cryptographic Protocols through Compositional Analysis Techniques," in Proc. TACAS'99, ser. LNCS, vol. 1579. Springer, 1999, pp. 148-162.
4. C. Meadows, "Formal Verification of Cryptographic Protocols: a Survey," in Proc. ASIACRYPT'94, ser. LNCS, vol. 917. Springer, 1995, pp. 135-150.
5. G. Lowe and A. W. Roscoe, "Using CSP to Detect Errors in the TMN Protocol," Software Engineering, vol. 23, no. 10, pp. 659-669, 1997.
6. V. Shmatikov and U. Stern, "Efficient Finite State Analysis for Large Security Protocols," in Proc. CSFW'98. IEEE Press, 1998, pp. 105-116.
7. F. J. Thayer, J. C. Herzog, and J. D. Guttman, "Strand spaces: proving security protocols correct," Journal of Computer Security, vol. 7, no. 1, pp. 191-230, 1999.
8. G. Lowe, "Breaking and fixing the Needham-Schroeder public-key protocol using FDR," in Proc. TACAS'96, ser. LNCS, vol. 1055. Springer, 1996, pp. 147-166.
9. J. C. Mitchell, M. Mitchell, and U. Stern, "Automated Analysis of Cryptographic Protocols using Murphi," in Proc. S&P'97. IEEE Press, 1997, pp. 141-153.
10. A. W. Roscoe and M. H. Goldsmith, "The Perfect Spy for Modelchecking Crypto-protocols," in Proc. DIMACS Workshop on Design and Formal Verification of Security Protocols, 1997.
11. F. Martinelli, M. Petrocchi, and A. Vaccarelli, "Formal analysis of some secure procedures for certificate delivery," Software, Testing, Verification and Reliability, vol. 16, no. 1, pp. 33-59, 2006.
12. M. Abadi and M. R. Turtle, "A Semantics for a Logic of Authentication," in Proc. SPDC'91. ACM Press, 1991, pp. 201-216.
13. D. Kindred and J. M. Wing, "Fast automatic checking of security protocols," in Proc. 2nd Usenix Workshop on Electronic Commerce, 1996, pp. 41-52.
14. L. C. Paulson, "Proving Properties of Security Protocols by Induction," in Proc. CSFW'97. IEEE Press, 1997, pp. 70-83.
15. M. Abadi, "Secrecy by Typing in Security Protocols," Journal of the ACM, vol. 46, no. 5, pp. 749-786, 1999.
16. C. Bodei, P. Degano, F. Nielson, and H. R. Nielson, "Static Analysis for the pi-Calculus with Applications to Security," Information and Computation, vol. 168, no. 1, pp. 68-92, 2001.
17. M. H. ter Beek, G. Lenzini, and M. Petrocchi, "A Team Automaton Scenario for the Analysis of Security Properties in Communication Protocols," Journal of Automata, Languages and Combinatorics, accepted for publication, 2006.
18. R. Focardi and F. Martinelli, "A uniform approach for the definition of security properties," in Proc. FM'99, ser. LNCS, vol. 1708. Springer, 1999, pp. 794-813.
19. F. Martinelli, "Analysis of security protocols as open systems," Theoretical Computer Science, vol. 290, no. 1, pp. 1057-1106, 2003.
20. Partial Model Checking Security Analyzer PaMoChSA v1.0. [Online]. Available: http://www.iit.cnr.it/staff/fabio.martinelli/pamochsa.htm
21. M. Bonifati, P. De Lutiis, C. Moiso, E. Morello, and L. Sarchi, "Identity Federation for Services in Convergent Networks," in Proc. ICIN'06, 2006, pp. 109-114.
22. Liberty Alliance Project. [Online]. Available: www.projectliberty.org
23. T. Wason et al. (2005) Liberty ID-FF Architecture Overview v1.2. [Online]. Available: www.projectliberty.org/liberty/specifications.-l
24. OASIS Security Services TC. (2005) Security Assertion Markup Language SAML v2.0. [Online]. Available: www.oasis-open.org/specs/
25. D. Dolev and A. Yao, "On the Security of Public Key Protocols," IEEE Transactions on Information Theory, vol. 29, no. 2, pp. 198-208, 1983.
26. G. Lowe, "An attack on the Needham-Schroeder public key authentication protocol," Information Processing Letters, vol. 56, no. 3, pp. 131-136, 1995.
27. R. Milner, Communication and Concurrency. Prentice Hall, 1989.
28. H. R. Andersen, "Partial Model Checking," in Proc. LICS'95. IEEE Press, 1995, pp. 398-407.
29. E. M. Clarke, O. Grumberg, and D. A. Peled, Model Checking. MIT Press, 1999.