Slede: A domain-specific verification framework for sensor network security protocol implementations

WiSec'08: Proceedings of the 1st ACM Conference on Wireless Network Security

Volumn , Issue , 2008, Pages 109-118

  Hanna, Youssef ^a   Rajan, Hridesh ^a   Zhang, Wensheng ^a  

^a Iowa State University   (United States)

Author keywords

Intruder generation; Model checking; Security protocols; Sensor networks

Indexed keywords

AUTOMATED FORMAL VERIFICATIONS; DO-MAINS; DOMAIN TERMS; FAULT SCENARIOS; FORMAL DESCRIPTIONS; FORMAL VERIFICATIONS; INTRUDER GENERATION; MODEL CONSTRUCTIONS; NETWORK TOPOLOGIES; OF SENSORS; SECURITY PROTOCOL SPECIFICATIONS; SECURITY PROTOCOLS; SENSOR NETWORK SECURITIES; SYSTEM FAILURES; VERIFICATION FRAMEWORKS; VERIFICATION PROCESSES;

ELECTRIC NETWORK TOPOLOGY; INTERNET; INTERNET PROTOCOLS; METROPOLITAN AREA NETWORKS; MODEL CHECKING; NETWORK SECURITY; SECURITY OF DATA; SENSOR NETWORKS; SENSORS; SYSTEMS ENGINEERING; THEOREM PROVING; TOPOLOGY; WIRELESS SENSOR NETWORKS;

WIRELESS NETWORKS;

EID: 56749092205     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352533.1352551     Document Type: Conference Paper

References (45)

1. I. Akyildiz, W. Su, Y, Sankarasubramaniam, and E.Cayirci. Wireless Sensor Networks: A Survey. Computer Networks, 38(4), March 2002.
2. A. Armando, D. Basin, Y. Boichut, Y. Chevalier, L. Compagna, J. Cuellar, P. H. Drielsma, P.-C. Héam, O. Kouchnarenko, J. Mantovani, S. Mödersheim, D. von Oheimb, M. Rusinowitch, J. S. Santiago, M. Turuani, L. Viganò, and L. Vigneron. The AVISPA Tool for the automated validation of internet security protocols and applications. In CAV'2005, Edinburgh, Scotland, 2005. Springer-Verlag.
3. T. Ball and S. K. Rajamani. The SLAM project: debugging system software via static analysis. In POPL '02: Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 1-3, New York, NY, USA, 2002. ACM Press.
4. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In CSFW '06: Proceedings of the 19th IEEE Workshop on Computer Security Foundations, pages 139-152, Washington, DC, USA, 2006. IEEE Computer Society.
5. B. Blanchet. An Efficient Cryptographic Protocol Verifier Based on Prolog Rules. In 14th IEEE Computer Security Foundations Workshop (CSFW-14), pages 82-96, Cape Breton, Nova Scotia, Canada, June 2001. IEEE Computer Society.
6. D. Boyle and T. Newe. Security protocols for use with wireless sensor networks: A survey of security architectures. In Third International Conference on Wireless and Mobile Communications (ICWMC'07), page 54, March 2007.
7. J. Burns and C. J. Mitchell. A security scheme for resource sharing over a network. Comput. Secur., 9(1):67-75, 1990.
8. M. Burrows, M. Abadi, and R. Needham. A logic of authentication. ACM Trans. Comput. Syst., 8(1):18-36, 1990.
9. L. Buttyan. Formal methods in the design of cryptographic protocols (state of the art). Technical Report SSC/1999/38, Swiss Federal Institute of Technology (EPFL), nov 1999.
10. Y Chevalier, L. Compagna, J. Cuellar, P. H. Drielsma, J. Mantovani, S. Modersheim, and L. Vigneron. A high-level protocol specification language for industrial security-sensitive protocols. In SAPS, pages 193-205, 2004.
11. E. Clarke, M. Talupur, T. Touili, and H. Veith. Verification by network decomposition. In Fifteenth International Conference on Concurrency Theory (CONCUR 04), pages 276-291. Springer-Verlag, 2004.
12. J. C. Corbett, M. B. Dwyer, J. Hatcliff, S. Laubach, C. S. Preanu, Robby, and H. Zheng. Bandera: extracting finite-state models from Java source code. In ICSE '00: Proceedings of the 22nd international conference on Software engineering, pages 439-448, New York, NY, USA, 2000. ACM Press.
13. D. Dolev and A. C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, IT-29(12): 198-208, mar 1983.
14. J. Edmund M. Clarke, O. Grumberg, and D. A. Peled. Model checking. MIT Press, Cambridge, MA, USA, 1999.
15. D. Gay, P. Levis, R. von Behren, M. Welsh, E. Brewer, and D. Culler. The nesC language: A holistic approach to networked embedded systems. In PLDI '03: Proceedings of the 2003 conference on Programming language design and implementation, pages 1-11, 2003.
16. P. Godefroid. Model checking for programming languages using verisoft. In POPL '97: Proceedings of the 24th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 174 - 186, New York, NY, USA, 1997. ACM Press.
17. J. Goubault-Larrecq and F. Parrennes. Cryptographic protocol analysis on real C code. In R. Cousot, editor, VMCAI'05, volume 3385 of Lecture Notes in Computer Science, pages 363-379, Paris, France, Jan. 2005. Springer.
18. Y. Hanna and H. Rajan. Slede: event-based specification of sensor network security protocols. SIGSOFT Softw. Eng. Notes, 31(6): 1-2, 2006.
19. K. Havelund and G. Rosu. Monitoring Java programs with Java PathExplorer. In K. Havelund and G. Roşu, editors, Runtime Verification, volume 55 of Electronic Notes in Theoretical Computer Science. Elsevier, 23July 2001.
20. T A. Henzinger, R. Jhala, R. Majumdar, and G. Sutre. Lazy abstraction. In POPL '02: Proceedings of the 29th ACM SIGPLAN-SIGACT symposium on Principles of programming languages, pages 58-70, New York, NY, USA, 2002. ACM Press.
21. G. J. Holzmann. Design and validation of computer protocols. Prentice-Hall, Inc., Upper Saddle River, NJ, USA, 1991.
22. G. J. Holzmann. The model checker spin. IEEE Transactions on Software Engineering, 23(5):279-95, May 1997.
23. G. J. Holzmann. The model checker SPIN. IEEE Trans. Softw. Eng., 23(5):279-295, 1997.
24. C. Intanagonwiwat, R. Govindan, and D. Estrin. Directed Diffusion: A Scalable and Robust Communication. MobiCOM '00, August 2000.
25. R. A. Kemmerer. Analyzing encryption protocols using formal verification techniques. IEEE Journal on Selected Areas in Communications, 7(4):448-457, may 1989.
26. P. Levis, N. Lee, M. Welsh, and D. Culler. Tossim: accurate and scalable simulation of entire tinyos applications. In SenSys '03: Proceedings of the 1st international conference on Embedded networked sensor systems, pages 126-137, New York, NY, USA, 2003. ACM Press.
27. D. Liu and P. Ning. Establishing Pairwise Keys in Distributed Sensor Networks. The 10th ACM Conference on Computer and Communications Security, 2003.
28. D. Longley and S. Rigby. An automatic search for security flaws in key management schemes. Comput. Secur., 11(1):75-89, 1992.
29. W. Marrero, E. Clarke, and S. Jha. Model checking for security protocols, 1997.
30. C. Meadows. Formal verification of cryptographic protocols: A survey. In ASIACRYPT '94: Proceedings of the 4th International Conference on the Theory and Applications of Cryptology, pages 135-150, London, UK, 1995. Springer-Verlag.
31. C. Meadows. The NRL protocol analyzer: An overview. Journal of Logic Programming, 26(2): 113-131, 1996.
32. C. Meadows. Open issues in formal methods for cryptographic protocol analysis. In MMM-ACNS '01 : Proceedings of the International Workshop on Information Assurance in Computer Networks, page 21, London, UK, 2001. Springer-Verlag.
33. J. K. Millen, S. C. Clark, and S. B. Freeman. The interrogator: protocol security analysis. IEEE Trans. Softw. Eng., 13(2):274-288, 1987.
34. M. Musuvathi, D. Y W. Park, A. Chou, D. R. Engler, and D. L. Dill. Cmc: a pragmatic approach to model checking real code. SIGOPS Oper. Syst. Rev., 36(SI):75-88, 2002.
35. nesC Compiler. http://sourceforge.net/projects/nescc.
36. B. C. Neuman and S. G. Stubblebine. A note on the use of timestamps as nonces. SIGOPS Oper. Syst. Rev., 27(2): 10-14, 1993.
37. A. Perrig, R. Szewczyk, V. Wen, D. Culler, and J. Tygar. Spins: security protocols for sensor netowrks. In Proceedings of ACM Mobile Computing and Networking (Mobicom'01), pages 189-199, 2001.
38. Robby, M. B. Dwyer, and J. Hatcliff. Bogor: an extensible and highly-modular software model checking framework. In ESEC/FSE-11, pages 267-276, New York, NY, USA, 2003. ACM Press.
39. A. D. Rubin and P. Honeyman. Formal methods for the analysis of authentication protocols. Technical Report CITI Technical Report 93-7, CITI, 1993.
40. S. Schneider. Verifying authentication protocol implementations. In FMOODS '02: Proceedings of the IFIP TC6/WG6.1 Fifth International Conference on Formal Methods for Open Object-Based Distributed Systems V, pages 5-24, Deventer, The Netherlands, The Netherlands, 2002. Kluwer, B.V.
41. G. J. Simmons. How to (selectively) broadcast a secret. In Proceedings of the IEEE Symposium on Security and Privacy, page 108, 1985.
42. P. G. Stefanos Gritzalis, Diomidis Spinellis. Security protocols over open networks and distributed systems: formal methods for their analysis, design, and verification. Computer Communications, 22(8):697-709, 1999.
43. L. Tobarra, D. Cazorla, F. Cuartero, G. DÂaz, and E. Cambronero. Model Checking Wireless Sensor Network Security Protocols: TinySec + LEAP. In WSAN'07, pages 95-106, Albacete (Spain), September 2007. IFIP Main Series, Springer.
44. P. van Oorschot. Extending cryptographic logics of belief to key agreement protocols. In CCS '93: Proceedings of the 1st ACM conference on Computer and communications security, pages 232-243, New York, NY, USA, 1993. ACM Press.
45. S. Zhu, S. Setia, and S. Jajodia. LEAP: Efficient Security Mechanisms for Large-Scale Distributed Sensor Networks. The 10th ACM Conference on Computer and Communications Security, 2003.