Improving the Security of Cryptographic Protocol Standards

IEEE Security and Privacy

Volumn 13, Issue 3, 2015, Pages 24-31

  Basin, David ^a   Cremers, Cas ^b   Miyazaki, Kunihiko ^c   Radomirović, Saša ^a   Watanabe, Dai ^c  

^a ETH ZURICH   (Switzerland)

^b UNIVERSITY OF OXFORD   (United Kingdom)

^c Hitachi ^*  (Japan)

Author keywords

formal methods; network protocols; protocol verification; security; standards

Indexed keywords

CRYPTOGRAPHY; FORMAL METHODS; MOBILE SECURITY; NETWORK SECURITY; STANDARDS;

CRYPTOGRAPHIC PROTOCOLS; PROTOCOL SECURITY; PROTOCOL VERIFICATION; SECURITY; SECURITY PROPERTIES; STANDARDIZATION PROCESS; THREAT MODELS;

NETWORK PROTOCOLS;

EID: 84933052188     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2013.162     Document Type: Article

References (17)

1. D. Basin, S. Mödersheim, and L. Viganò, "OFMC: A Symbolic Model Checker for Security Protocols," Int'l J. Information Security, vol. 4, no. 3, 2005, pp. 181-208.
2. C. Cremers, "The Scyther Tool: Verification, Falsification, and Analysis of Security Protocols," Proc. 20th Int'l Conf. Computer Aided Verification, LNCS 5123, 2008, pp. 414-418; www.cs.ox.ac.uk/people/cas.cremers/scyther.
3. S. Meier, C. Cremers, and D. Basin, "Efficient Construction of Machine-Checked Symbolic Protocol Security Proofs," J. Computer Security, vol. 21, no. 1, 2013, pp. 41-87.
4. B. Schmidt et al., "Automated Analysis of Diffie-Hellman Protocols and Advanced Security Properties," Proc. 25th IEEE Computer Security Foundations Symp. (CSF 12), 2012, pp. 78-94.
5. D. Johnston and J. Walker, "Overview of IEEE 802.16 Security," IEEE Security & Privacy, vol. 2, no. 3, 2004, pp. 40-48.
6. B. Aboba, "Summary of the IEEE 802.16e D8 Security Review," Sept. 2005; www.ieee802.org/16/tge/contrib/C80216e-05-373.pdf.
7. S. Xu and C.-T. Huang, "Attacks on PKM Protocols of IEEE 802.16 and Its Later Versions," Proc. 3rd Int'l Symp. Wireless Communication Systems, 2006, pp. 185-189.
8. S. Andova et al., "A Framework for Compositional Verification of Security Protocols," Information and Computation, Feb. 2008, pp. 425-459.
9. D. Dolev and A. Yao, "On the Security of Public Key Protocols," IEEE Trans. Information Theory, vol. 29, no. 2, 1983, pp. 198-208.
10. G. Lowe, "A Hierarchy of Authentication Specifications," Proc. 10th IEEE Computer Security Foundations Workshop (CSFW 97), 1997, pp. 31-44.
11. D. Basin, C. Cremers, and S. Meier, "Provably Repairing the ISO/IEC 9798 Standard for Entity Authentication," Proc. 1st Int'l Conf. Principles of Security and Trust (POST 12), LNCS 7215, P. Degano and J.D. Guttman, eds., 2012, pp. 129-148.
12. C. Meadows, "Analysis of the Internet Key Exchange Protocol Using the NRL Protocol Analyzer," Proc. IEEE Symp. Security and Privacy, 1999, pp. 216-231.
13. C. Meadows, P.F. Syverson, and I. Cervesato, "Formal Specification and Analysis of the Group Domain of Interpretation Protocol Using NPATRL and the NRL Protocol Analyzer," J. Computer Security, vol. 12, no. 6, 2004, pp. 893-931.
14. S. Matsuo et al., "How to Evaluate the Security of Real-Life Cryptographic Protocols? The Cases of ISO/IEC 29128 and CRYPTREC," Proc. 14th Int'l Conf. Financial Cryptography and Data Security, LNCS 6054, 2010, pp. 182-194.
15. ISO/IEC 29128: Information Technology - Security Techniques - Verification of Cryptographic Protocols, Int'l Organization for Standardization, 2011.
16. B. Blanchet, "An Efficient Cryptographic Protocol Verifier Based on Prolog Rules," Proc. 14th IEEE Computer Security Foundations Workshop (CSFW 01), 2001, pp. 82-96.
17. S. Meier et al., "The TAMARIN Prover for the Symbolic Analysis of Security Protocols," Proc. 25th Int'l Conf. Computer Aided Verification (CAV 13), LNCS 8044, 2013, pp. 696-701.