Formally sound refinement of Spi Calculus protocol specifications into java code

Proceedings of IEEE International Symposium on High Assurance Systems Engineering

Volumn , Issue , 2008, Pages 241-250

  Pironti, Alfredo ^a   Sisto, Riccardo ^a  

^a POLITECNICO DI TORINO   (Italy)

Author keywords

Correctness preserving code generation; Formal methods; Model based software development; Security protocols

Indexed keywords

CALCULATIONS; COMPUTER SOFTWARE; FORMAL LOGIC; NETWORK COMPONENTS; SOFTWARE DESIGN; SPECIFICATIONS; SYSTEMS ENGINEERING;

CORRECTNESS PRESERVING CODE GENERATION; JAVA IMPLEMENTATION; JAVA LIBRARY; MODEL-BASED SOFTWARE DEVELOPMENT; PROTOCOL SPECIFICATIONS; SECURITY PROTOCOLS; TYPE SYSTEMS;

FORMAL METHODS;

EID: 58449090669     PISSN: 15302059     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/HASE.2008.27     Document Type: Conference Paper

References (27)

1. M. Abadi and B. Blanchet. Computer-Assisted Verification of a Protocol for Certified Email. Science of Computer Programming, 58(l-2):3-27, 2005.
2. M. Abadi, B. Blanchet, and C. Fournet. Just fast keying in the pi calculus. ACM Transactions on Information and System Security, 10(3): 1-59, 2007.
3. M. Abadi and A. D. Gordon. A calculus for cryptographic protocols the spi calculus. Research Report 149, 1998.
4. M. Backes, B. Pfitzmann, and M. Waidner. A composable cryptographic library with nested operations. In ACM Conference on Computer and Communications Security, pages 220-230, 2003.
5. S. Bajaj et al. Web services policy 1.2 - attachment (WS- policyattachment). W3C Recommendation, 2006.
6. S. Bajaj et al. Web services policy 1.2 - framework (WS- policy). W3C Recommendation, 2006.
7. K. Bhargavan, C. Fournet, and A. D. Gordon. Verified reference implementations of WS-security protocols. In Web Services and Formal Methods, pages 88-106, 2006.
8. K. Bhargavan, C. Fournet, A. D. Gordon, and G. O'Shea. An advisor for web services security policies. In Workshop on Secure web services, pages 1-9, 2005.
9. K. Bhargavan, C. Fournet, A. D. Gordon, and S. Tse. Verified interoperable implementations of security protocols. In
10. Computer Security Foundations Workshop, pages 139-152, 2006.
11. B. Blanchet. An Efficient Cryptographic Protocol Verifier Based on Prolog Rules. In IEEE Computer Security Foundations Workshop, pages 82-96, 2001.
12. D. Dolev and A. C.-C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, 29(2): 198-207, 1983.
13. L. Durante, R. Sisto, and A. Valenzano. Automatic testing equivalence verification of spi calculus specifications. ACM Transactions on Software Engineering and Methodology, 12(2):222-284, 2003.
14. J. Goubault-Larrecq and F. Parrennes. Cryptographic protocol analysis on real C code. In Verification, Model Checking, and Abstract Interpretation, pages 363-379, 2005.
15. E. Hubbers, M. Oostdijk, and E. Poll. Implementing a formally verifiable security protocol in Java card. In Security in Pervasive Computing, pages 213-226, 2003.
16. A. Igarashi and N. Kobayashi. A generic type system for the pi-calculus. Electronic Notes in Theoretical Computer Science, 311(1-3): 121-163, 2004.
17. C.-W. Jeon, I.-G. Kim, and J.-Y. Choi. Automatic generation of the C# code for security protocols verified with casper/FDR. In International Conference on Advanced Information Networking and Applications, pages 507-510, 2005.
18. J. Jürjens. Verification of low-level crypto-protocol implementations using automated theorem proving. In Formal Methods and Models for Co-Design, pages 89-98, 2005.
19. R. Milner, J. Parrow, and D. Walker. A calculus of mobile processes, parts I and II. Information and Computation, 100(l):l-77, 1992.
20. A. Nadalin, C. Kaler, P. Hallam-Baker, and R. Monzillo. OASIS web services security: SOAP message security 1.1 (WS-security 2004), 2006.
21. B. C. Pierce. Types and Programming Languages. MIT Press, 2002.
22. A. Pironti and R. Sisto. An experiment in interoperable cryptographic protocol implementation using automatic code generation. In IEEE Symposium on Computers and Communications, pages 839-844, 2007.
23. A. Pironti and R. Sisto. Correctness-preserving translation from Spi Calculus to Java, revision 2. Technical Report, Politecnico di Torino, Aug. 2008. Available at: http://staff.polito.it/riccardo.sisto/reports/translation2. ps.
24. A. Pironti and R. Sisto. Soundness conditions for message encoding abstractions in formal security protocol models. In International Conference on Availability, Reliability and Security, pages 72-79, 2008.
25. D. Pozza, R. Sisto, and L. Durante. Spi2java: Automatic cryptographic protocol Java code generation from spi calculus. In International Conference on Advanced Information Networking and Applications, pages 400-405, 2004.
26. G. Schellhorn. ASM refinement and generalizations of forward simulation in data refinement: a comparison. Theoretical Computer Science, 336(2-3):403-435, 2005.
27. B. Tobler and A. Hutchison. Generating network security protocol implementations from formal specifications. In Certification and Security in Inter-Organizational E- Services, Toulouse, France, 2004.