• Citer

Modeling and analysis of security protocols using role based specifications and petri nets

par Bouroulet, Roland;Devillers, Raymond ;Klaudel, Hanna;Pelz, Elisabeth;Pommereau, Franck
Référence Lecture notes in computer science, 5062 LNCS, page (72-91)
Publication Publié, 2008

Article révisé par les pairs

• Détails
• Contenu

Résumé :

In this paper, we introduce a framework composed of a syntax and its compositional Petri net semantics, for the specification and verification of properties (like authentication) of security protocols. The protocol agents (e.g., an initiator, a responder, a server, a trusted third party, ...) are formalized as roles, each of them having a predefined behavior depending on their global and also local knowledge (including for instance public, private and shared keys), and may interact in a potentially hostile environment. The main characteristics of our framework, is that it makes explicit, structured and formal, the usually implicit information necessary to analyse the protocol, for instance the public and private context of execution. The roles and the environment are expressed using SPL processes and compositionally translated into high-level Petri nets, while the context specifying the global and local knowledge of the participants in the protocol is used to generate the corresponding initial marking (with respect to the studied property). Finally, this representation is used to analyse the protocol properties, applying techniques of simulation and model-checking on Petri nets. The complete approach is illustrated on the case study of the Kao-Chow authentication protocol. © 2008 Springer-Verlag Berlin Heidelberg.