Verifying security protocols by knowledge analysis. (27th August 2008)

• Record Type: Journal Article
• Authors: Ma, Xiaoqi; Cheng, Xiaochun
• Is Part Of: International journal of security and networks. Volume 3:Number 3(2008)
• Page Start: 183
• Page End: 192
• Publication Date: 2008-08-27
• Subjects: security protocols -- knowledge-based systems -- KBS -- formal verification -- attacks -- flaws -- interleaving sessions -- public key authentication -- information security; Computer networks -- Security measures -- Periodicals; 005.805
• Languages: English
• ISSNs: 1747-8405

Abstract

This paper describes a new interactive method to analyse knowledge of participants involved in security protocols and further to verify the correctness of the protocols. The method can detect attacks and flaws involving interleaving sessions besides normal attacks. The implementation of the method in a generic theorem proving environment, namely Isabelle, makes the verification of protocols mechanical and efficient; it can verify a medium-sized security protocol in less than ten seconds. As an example, the paper finds the flaw in the Needham-Schroeder public key authentication protocol and proves the secure properties and guarantees of the protocol with Lowe's fix to show the effectiveness of this method.