A framework for compositional verification of security protocols

Information and Computation

Volumn 206, Issue 2-4, 2008, Pages 425-459

  Andova, Suzana ^a   Cremers, Cas ^b   Gjøsteen, Kristian ^a   Mauw, Sjouke ^c   Mjølsnes, Stig F ^a   Radomirović, Saša ^c  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

^b ETH ZURICH   (Switzerland)

^c UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

Authentication; Automatic verification; Compositionality; Confidentiality; Security properties; Security protocols; Semantics; WiMAX

Indexed keywords

AUTHENTICATION; COMPUTATIONAL COMPLEXITY; MULTI AGENT SYSTEMS; SEMANTICS; STRUCTURED PROGRAMMING; VERIFICATION;

AUTOMATIC VERIFICATION; COMPOSITIONAL VERIFICATION; CONFIDENTIALITY; SECURITY PROPERTIES; SECURITY PROTOCOLS; WIMAX;

NETWORK SECURITY;

EID: 40149109757     PISSN: 08905401     EISSN: 10902651     Source Type: Journal    
DOI: 10.1016/j.ic.2007.07.002     Document Type: Article

References (44)

1. Abadi M., and Gordon A.D. A calculus for cryptographic protocols: the spi calculus. Inf. Comput. 1 148 (1999) 1-70
2. J. Alves-Foss, Provably insecure mutual authentication protocols: the two-party symmetric encryption case, in: Proceedings of National Information System Security Conference, October 1999, pp. 306-314.
3. Anlauff M., Pavlovic D., Waldinger R., and Westfold S. Proving authentication properties in the Protocol Derivation Assistant. In: Degano P., Küsters R., and Vigano L. (Eds). Proceedings of FCS-ARSPA 2006 (2006), ACM
4. Armando A., Basin D., Boichut Y., Chevalier Y., Compagna L., Cuellar L., Drielsma P.H., Heám P., Kouchnarenko O., Mantovani J., Mödersheim S., von Oheimb D., Rusinowitch M., Santiago J., Turuani M., Viganò L., and Vigneron L. The AVISPA tool for the automated validation of internet security protocols and applications. Proceedings of Computer Aided Verification'05 (CAV). Lecture Notes in Computer Science vol. 3576 (2005), Springer 281-285
5. Backes M., Datta A., Derek A., Mitchell J.C., and Turuani M. Compositional analysis of contract-signing protocols. Theor. Comput. Sci. 367 1-2 (2006) 33-56
6. Boreale M., and Gorla D. On compositional reasoning in the spi-calculus. In: Nielsen M., and Engberg U. (Eds). Proceedings of Fifth International Conference on Foundations of Software Science and Computation Structures (FoSSaCS'02). LNCS vol. 2303 (2002), Springer 67-81
7. M. Bugliesi, R. Focardi, M. Maffei, Authenticity by tagging and typing, in: FMSE '04: Proceedings of the 2004 ACM Workshop on Formal Methods in Security Engineering, ACM Press, New York, NY, USA, 2004, pp. 1-12.
8. Bugliesi M., Focardi R., and Maffei M. Compositional analysis of authentication protocols. In: Schmidt D.A. (Ed). Proceedings of the 13th European Symposium on Programming (ESOP). Lecture Notes in Computer Science vol. 2986 (2004), Springer 140-154
9. M. Burrows, M. Abadi, R. Needham, A logic of authentication, in: Practical Cryptography for Data Internetworks, IEEE Computer Society Press, 1996. Reprinted from the Proceedings of the Royal Society, vol. 426, No. 1871, 1989.
10. Canetti R., Meadows C., and Syverson P. Environmental requirements for authentication protocols. In: Okada M., Pierce B.C., Scedrov A., Tokuda H., and Yonezawa A. (Eds). Software Security-Theories and Systems, Mext-NSF-JSPS International Symposium, ISSS 2002. Lecture Notes in Computer Science vol. 2609 (2002), Springer, Tokyo, Japan 339-355
11. C.J.F. Cremers, Scyther: automatic verification of security protocols. Available from: .
12. C.J.F. Cremers, Compositionality of security protocols: a research agenda, in: F. Gadducci, M. ter Beek (Eds.), VODCA 2004, ENTCS, vol. 142(3), Bertinoro, Italy, 2006, pp. 99-110.
13. C.J.F. Cremers, Feasibility of multi-protocol attacks, in: Proceedings of the First International Conference on Availability, Reliability and Security (ARES), IEEE Computer Society Press, Vienna, Austria, April 2006, pp. 287-294.
14. C.J.F. Cremers, Scyther-Semantics and Verification of Security Protocols, PhD Thesis, Eindhoven University of Technology, 2006, ISBN 90-386-0804-7. ISBN 978-90-386-0804-4.
15. C.J.F. Cremers, S. Mauw, Operational semantics of security protocols, in: S. Leue, T.J. Systä (Eds.), Scenarios: Models, Algorithms and Tools (Dagstuhl 03371 post-seminar proceedings, September 7-12, 2003), Lecture Notes in Computer Science, vol. 3466, 2005, pp. 66-89.
16. C.J.F. Cremers, S. Mauw, E.P. de Vink, Injective synchronisation: an extension of the authentication hierarchy, Theor. Comput. Sci. 367(1-2) (2006) 139-161, in: P. Degano, L. Vigano (Eds.), Special issue on ARSPA'05.
17. Datta A., Derek A., Mitchell J.C., and Roy A. Protocol composition logic (pcl). Electron. Notes Theor. Comput. Sci. 172 (2007) 311-358
18. A. Datta, A. Derek, J.C. Mitchell, D. Pavlovic, Secure protocol composition, in: FMSE '03: Proceedings of the 2003 ACM Workshop on Formal Methods in Security Engineering, ACM Press, New York, NY, USA, 2003, pp. 11-23.
19. Dolev D., and Yao A.C. On the security of public key protocols. IEEE Trans. Inf. Theory IT-29 12 (1983) 198-208
20. R. Focardi, R. Gorrieri, Automatic compositional verification of some security properties, Lecture Notes in Computer Science, vol. 1055, 1996, pp. 166-186.
21. Focardi R., and Gorrieri R. The compositional security checker: a tool for the verification of information flow security properties. IEEE Trans. Softw. Eng. 23 9 (1997) 550-571
22. J.D. Guttman, F.J. Thayer, Protocol independence through disjoint encryption, in: PCSFW: Proceedings of the 13th Computer Security Foundations Workshop, IEEE Computer Society Press, 2000. Available from: .
23. Guttman J.D., and Thayer F.J. Authentication tests and the structure of bundles. Theor. Comput. Sci. 283 2 (2001) 333-380
24. He C., Sundararajan M., Datta A., Derek A., and Mitchell J.C. A modular correctness proof of IEEE 802.11i and TLS. In: Atluri V., Meadows C., and Juels A. (Eds). ACM Conference on Computer and Communications Security (2005), ACM 2-15
25. Heintze N., and Tygar J.D. A model for secure protocols and their compositions. IEEE Trans. Softw. Eng. 22 1 (1996) 16-30
26. IEEE, standard 802.16-2004, 2004.
27. IEEE, standard 802.16e-2005, 2005.
28. Johnston D., and Walker J. Overview of IEEE 802.16 security. IEEE Security Privacy 2 3 (2004) 40-48
29. J. Jürjens, Composability of secrecy, in: V. Gorodetski, V. Skormin, L. Popyack (Eds.), International Workshop on Mathematical Methods, Models and Architectures for Computer Networks Security (MMM-ACNS 2001), Lecture Notes in Computer Science, vol. 2052. Springer, St. Petersburg, May 2001, pp. 28-38.
30. E. Kaasenbrood, WiMAX security-a formal and informal analysis, Master's project, Eindhoven University of Technology, Department of Mathematics and Computer Science, 2006.
31. Kelsey J., Schneier B., and Wagner D. Protocol interactions and the chosen protocol attack. In: Christianson B., Crispo B., Lomas T.M.A., and Roe M. (Eds). Proceedings of the Fifth International Workshop on Security Protocols. Lecture Notes in Computer Science vol. 1361 (1998), Springer, London, UK 91-104
32. Lowe G. Breaking and fixing the Needham-Schroeder public-key protocol using FDR. Proceedings of TACAS. Lecture Notes in Computer Science vol. 1055 (1996), Springer 147-166
33. M. Maffei, Tags for multi-protocol authentication, in: Proceedings of the Second International Workshop on Security Issues in Coordination Models, Languages, and Systems, Electronic Notes in Theoretical Computer Science, vol. 128(5), Elsevier ScienceDirect, August 2005, pp. 55-63.
34. Mantel H. On the composition of secure systems. SP '02: Proceedings of the 2002 IEEE Symposium on Security and Privacy (2002), IEEE Computer Society, Washington, DC, USA 88-101
35. Meadows C. Analysis of the internet key exchange protocol using the NRL protocol analyzer. Proceedings of the 20th IEEE Symposium on Security & Privacy (1999), IEEE Computer Society 216-231
36. Meadows C. Open issues in formal methods for cryptographic protocol analysis. Proceedings of DISCEX 2004 (2000), IEEE Computer Society Press 237-250
37. Needham R., and Schroeder M. Using encryption for authentication in large networks of computers. Commun. ACM 21 2 (1978) 120-126
38. Paulson L.C. The inductive approach to verifying cryptographic protocols. J. Comput. Secur. 6 1-2 (1998) 85-128
39. de Roever W.P., Hanneman U., Hooiman J., Lakhneche Y., Poel M., Zwiers J., and de Boer F. Concurrency verification. Introduction to compositional and noncompositional methods. Cambridge Tracts in Theoretical Computer Science vol. 54 (2001), Cambridge University Press, Cambridge, UK
40. O. Sheyner, J. Wing, Composing proofs of security protocols using Isabelle/IOA, August 2000, in: Proceedings of the Theorem Proving for Higher Order Logics (TPHOLs) Workshop, Short Paper.
41. F.J. Thayer, J.C. Herzog, J.D. Guttman, Strand spaces: why is a security protocol correct?, in: Proceedings of 1998 IEEE Symposium on Security and Privacy, Oakland, CA, 1998, pp. 66-77.
42. Thayer F.J., Herzog J.C., and Guttman J.D. Mixed strand spaces. Proceedings of the 1999 IEEE Computer Security Foundations Workshop (1999), IEEE Computer Society 72-82
43. S. Xu, C.-T. Huang, Attacks on PKM protocols of IEEE 802.16 and its later versions, in: Proceedings of Third International Symposium on Wireless Communication Systems (ISWCS 2006), Valencia, Spain, 2006.
44. S. Xu, M.M. Matthews, C.-T. Huang, Security issues in privacy and key management protocols of IEEE 802.16, in: Proceedings of the 44th ACM Southeast Conference (ACMSE 2006), Melbourne, FL, USA, 2006.