• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文期刊>IEEE transactions on dependable and secure computing >A Novel Security Protocol Attack Detection Logic with Unique Fault Discovery Capability for Freshness Attacks and Interleaving Session Attacks
【24h】

A Novel Security Protocol Attack Detection Logic with Unique Fault Discovery Capability for Freshness Attacks and Interleaving Session Attacks

机译：一种新颖的安全协议攻击检测逻辑，具有针对新鲜攻击和交叉会话攻击的独特故障发现能力

获取原文
获取原文并翻译 | 示例
           
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

This paper introduces a new logic-based technique for detecting security protocol weaknesses that are exploitable by freshness and interleaving session attacks. This technique is realised as a special purpose logic to be used throughout the protocol design stage, where a draft of the protocol is subjected to formal analysis prior to its publication or deployment. For any detected failures the analysis also reveals their cause, facilitating design corrections. The proposed Attack Detection Logic is introduced and its details, including the language, predicates, axioms, rules, semantics as well as soundness and completeness are presented. The effectiveness of the logic is evaluated in a case study, where it is demonstrated how to use the Attack Detection Logic as part of the design process of security protocols. Further, the logic is applied to a range of security protocols, including protocols with known weaknesses and protocols that are known to be secure. The logics ability to detect various attacks is established by demonstrating that for protocols with known weaknesses, at least one detection rule is activated and no detection rule is activated for protocols without weaknesses. This case study confirms the logics ability to detect design weaknesses exploitable by freshness and interleaving session attacks.
机译：本文介绍了一种新的基于逻辑的技术，用于检测安全协议漏洞，这些漏洞可被新鲜度和交错会话攻击利用。该技术被实现为在协议设计阶段中使用的专用逻辑，在该阶段中，协议草案在发布或部署之前要经过正式分析。对于任何检测到的故障，分析还可以揭示其原因，从而有助于设计更正。介绍了拟议的攻击检测逻辑，并介绍了其详细信息，包括语言，谓词，公理，规则，语义以及健全性和完整性。在案例研究中评估了该逻辑的有效性，并在其中演示了如何将攻击检测逻辑用作安全协议设计过程的一部分。此外，该逻辑被应用于一系列安全协议，包括具有已知弱点的协议和已知为安全的协议。通过证明对于具有已知弱点的协议，至少一个检测规则被激活，并且对于没有弱点的协议，没有检测规则被激活，来建立检测各种攻击的逻辑能力。该案例研究证实了逻辑能力能够检测可被新鲜度和交错会话攻击利用的设计弱点。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号