Provably correct Java implementations of Spi Calculus security protocols specifications

Computers and Security

Volumn 29, Issue 3, 2010, Pages 302-314

  Pironti, Alfredo ^a   Sisto, Riccardo ^a  

^a POLITECNICO DI TORINO   (Italy)

Author keywords

Code verification; Correctness preserving code generation; Formal methods; Model based software development; Security protocols

Indexed keywords

CODE GENERATION; CODE VERIFICATION; CORRECTNESS PRESERVING CODE GENERATION; MODEL-BASED; SECURITY PROTOCOLS; SOFTWARE DEVELOPMENT;

CALCULATIONS; COMPUTER SOFTWARE; FORMAL LOGIC; NETWORK COMPONENTS; NETWORK PROTOCOLS; NETWORK SECURITY; SOFTWARE DESIGN; SPECIFICATIONS; VERIFICATION;

FORMAL METHODS;

EID: 77949567843     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2009.08.001     Document Type: Article

References (29)

1. Abadi M., and Blanchet B. Computer-assisted verification of a protocol for certified email. Science of Computer Programming 58 1-2 (2005) 3-27
2. Abadi M., and Gordon A.D. A calculus for cryptographic protocols the spi calculus. Digital SRC Research Report 149 (1998)
3. Abadi M., Blanchet B., and Fournet C. Just fast keying in the pi calculus. ACM Transactions on Information and System Security 10 3 (2007) 1-59
4. Backes M, Pfitzmann B, Waidner M. A composable cryptographic library with nested operations. In: ACM Conference on Computer and Communications Security; 2003. pp. 220-30.
5. Bajaj S., Box D., Chappell D., Curbera F., Daniels G., Hallam-Baker P., et al. Web services policy 1.2-framework (WS-policy) (2006), W3C Recommendation
6. Bajaj S., Box D., Chappell D., Curbera F., Daniels G., Hallam-Baker P., et al. Web services policy 1.2-attachment (WS-policyattachment) (2006), W3C Recommendation
7. Bhargavan K, Fournet C, Gordon AD, O'Shea G. An advisor for web services security policies. In: Workshop on Secure web services; 2005. pp. 1-9.
8. Bhargavan K, Fournet C, Gordon AD, Tse S. Verified interoperable implementations of security protocols. In: Computer Security Foundations Workshop; 2006a. pp. 139-52.
9. Bhargavan K, Fournet C, Gordon AD. Verified reference implementations of WS-security protocols. In: Web Services and Formal Methods; 2006b. pp. 88-106.
10. Bierman G., Parkinson M., and Pitts A. MJ: an imperative core calculus for Java and Java with effects. Tech. Rep. 563 (2003), Cambridge University Computer Laboratory
11. Blanchet B. An efficient cryptographic protocol verifier based on prolog rules. In: IEEE Computer Security Foundations Workshop; 2001. pp. 82-96.
12. Dolev D., and Yao A.C.-C. On the security of public key protocols. IEEE Transactions on Information Theory 29 2 (1983) 198-207
13. Durante L., Sisto R., and Valenzano A. Automatic testing equivalence verification of spi calculus specifications. ACM Transactions on Software Engineering and Methodology 12 2 (2003) 222-284
14. Goubault-Larrecq J, Parrennes F. Cryptographic protocol analysis on real C code. In: Verification, Model Checking, and Abstract Interpretation; 2005. pp. 363-79.
15. Hubbers E, Oostdijk M, Poll E. Implementing a formally verifiable security protocol in java card. In: Security in Pervasive Computing; 2003. pp. 213-26.
16. Igarashi A., and Kobayashi N. A generic type system for the pi-calculus. Electronic Notes in Theoretical Computer Science 311 1-3 (2004) 121-163
17. Jeon CW, Kim IG, Choi JY. Automatic generation of the C# code for security protocols verified with casper/FDR. In: International Conference on Advanced Information Networking and Applications; 2005. pp. 507-10.
18. Jürjens J. Verification of low-level crypto-protocol implementations using automated theorem proving. In: Formal Methods and Models for Co-Design; 2005. pp. 89-98.
19. Milner R., Parrow J., and Walker D. A calculus of mobile processes, parts I and II. Information and Computation 100 1 (1992) 1-77
20. Nadalin A., Kaler C., Hallam-Baker P., and Monzillo R. SOAP message security 1.1 (WS-security 2004) (2006), OASIS Web Services Security
21. Pierce B.C. Types and programming languages (2002), MIT Press
22. Pironti A, Sisto R. An experiment in interoperable cryptographic protocol implementation using automatic code generation. In: IEEE Symposium on Computers and Communications; 2007. pp. 839-44.
23. Pironti A, Sisto R. Formally sound refinement of Spi Calculus protocol specifications into Java code. In: IEEE High Assurance Systems Engineering Symposium; 2008a. pp. 241-50.
24. Pironti A, Sisto R. Soundness conditions for message encoding abstractions in formal security protocol models. In: International Conference on Availability, Reliability and Security; 2008b. pp. 72-9.
25. Pironti A., and Sisto R. Correctness-preserving translation from Spi Calculus to Java, revision 3, (Tech. rep.), Politecnico di Torino (June 2009). http://staff.polito.it/riccardo.sisto/reports/translation3.pdf
26. Pozza D, Sisto R, Durante L. Spi2java: automatic cryptographic protocol java code generation from spi calculus. In: International Conference on Advanced Information Networking and Applications; 2004. pp. 400-05.
27. Sammapun U., Sharykin R., DeLap M., Kim M., and Zdancewic S. Formalizing java-MaC. Electronic Notes in Theoretical Computer Science 89 2 (2003) 171-190
28. Schellhorn G. ASM refinement and generalizations of forward simulation in data refinement: a comparison. Theoretical Computer Science 336 2-3 (2005) 403-435
29. Tobler B, Hutchison A. Generating network security protocol implementations from formal specifications. In: Certification and Security in Inter-Organizational E-Services, Toulouse, France; 2004.