Intrusion attack tactics for the model checking of e-commerce security guarantees

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4680 LNCS, Issue , 2007, Pages 238-251

  Basagiannis, Stylianos ^a   Katsaros, Panagiotis ^a   Pombortsis, Andrew ^a  

^a ARISTOTLE UNIVERSITY OF THESSALONIKI   (Greece)

Author keywords

e commerce protocols; Intrusion attacks; Model checking; SPIN

Indexed keywords

ELECTRONIC COMMERCE; INFORMATION RETRIEVAL; MESSAGE PASSING; MODEL CHECKING; NETWORK PROTOCOLS;

COMPLEX PROTOCOLS; PAYWORD MICRO PAYMENT PROTOCOL;

INTRUSION DETECTION;

EID: 38349029320     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-75101-4_22     Document Type: Conference Paper

References (27)

1. Dolev, D., Yao, A.: On the security of public-key protocols. IEEE Transactions on Information Theory 2/29, 198-208 (1983)
2. Woo, T.Y.C., Lam, S.S.: A semantic model for authentication protocols. In: Proc. of the IEEE Symposium on Research in Security and Privacy, IEEE Computer Society Press, Los Alamitos (1993)
3. Meadows, C.A.: Formal verification of cryptographic protocols: A survey. In: SafaviNaini, R., Pieprzyk, J.P. (eds.) ASIACRYPT 1994. LNCS, vol. 917, pp. 133-150. Springer, Heidelberg (1995)
4. Burrows, M., Abadi, M., Needham, R.: A logic of authentication. ACM Transaction on Computer Systems 8/1, 18-36 (1990)
5. Syverson, P., Cervesato, I.: The logic of authentication protocols. In: Focardi, R., Gorrieri, R. (eds.) Foundations of Security Analysis and Design. LNCS, vol. 2171, pp. 63-137. Springer, Heidelberg (2001)
6. The SPIN model checker official website, available at http://spinroot.com/
7. Holzmann, G.J.: Design and Validation of Computer Protocols. Prentice-Hall, Englewood Cliffs (1991)
8. Kremer, S., Markowitch, O., Zhou, J.: An intensive survey of fair non-repudiation protocols. Computer Communications 25/17, 1606-1621 (2002)
9. Shmatikov, V., Mitchell, J.C.: Finite-state analysis of two contract signing protocols. Theoretical Computer Science 283, 419-450 (2002)
10. Cremers, C.J.F.: Feasibility of multi-protocol attacks. In: Proc. of the First International Conference on Availability, Reliability and Security, IEEE Computer Society Press, Los Alamitos (2006)
11. Rivest, R.L., Shamir, A.: Payword and Micromint: Two simple micropayment schemes. In: Lomas, M. (ed.) Security Protocols. LNCS, vol. 1189, pp. 69-87. Springer, Heidelberg (1997)
12. Millen, J.K., Clark, S.C., Freedman, S.B.: The Interrogator: Protocol Security Analysis. IEEE Transactions on Software Engineering 13/2 (1987)
13. Clarke, E.M., Jha, S., Marrero, W.: Verifying security protocols with Brutus. ACM Transactions on Software Engineering and Methodology 9/4, 443-487 (2000)
14. Mitchell, J.C., Mitchell, M., Stern, U.: Automated analysis of cryptographic protocols using Murφ. In: Proc. of the IEEE Symposium on Research in Security and Privacy, pp. 141-153. IEEE Computer Society, Los Alamitos (1997)
15. Roscoe, A.W.: Modeling and verifying key-exchange protocols using CSP and FDR. In: Proc. of the 8th IEEE Computer Security Foundations Workshop, pp. 98-107. IEEE Computer Society, Los Alamitos (1995)
16. Roscoe, A.W.: The theory and practice of concurrency. Prentice Hall, Englewood Cliffs (1997)
17. Roscoe, A.W., Goldsmith, M.: The perfect spy for model-checking cryptoprotocols. In: Proc. of the 1997 DIMACS Workshop on Design and Formal Verification of Security Protocols (1997)
18. Lowe, G.: Casper: a compiler for the analysis of security protocols. In: Proc. of the IEEE Computer Security Foundations Workshop, pp. 18-30. IEEE Computer Society, Los Alamitos (1997)
19. Meadows, C., Kemmerer, R., Millen, J.: Three systems for cryptographic protocol analysis. Journal of Cryptology 7/2, 79-130 (1994)
20. Gritzalis, S., Spinellis, D., Georgiadis, P.: Security protocols over open networks and distributed systems: formal methods for their analysis, design, and verification. Computer Communications 22, 697-709 (1999)
21. Basin, D., Modersheim, S., Vigano, L.: OFMC: A Symbolic Model-Checker for Security Protocols. International Journal of Information Security (2004)
22. AVISPA: Automated validation of internet security protocols and applications, FET Open Project IST-2001-39252 (2003), http://www.avispa-project. org
23. Lowe, G.: Towards a completeness result for model-checking of Security Protocols. In: Proc. of the 11th Computer Security Foundations Workshop, IEEE Computer Society Press, Los Alamitos (1998)
24. Clark, J., Jacob, J.: A survey of authentication protocol literature: version 1.0, Technical Report, University of York (1997)
25. Heather, J., Lowe, G., Schneider, S.: How to prevent type flaw attacks on security protocols. In: Proc. of the 13th IEEE Computer Security Foundations Workshop, pp. 255-268. IEEE Computer Society, Los Alamitos (2000)
26. Carlsen, U.: Cryptographic protocol flaws - Know your enemy. In: Proc. of the 7th IEEE Computer Security Foundations Workshop, pp. 192-200. IEEE Computer Society, Los Alamitos (1994)
27. Rivest, R.L.: The MD5 Message-Digest Algorithm. In: Internet informational RFC 1321 (1992)