首页> 外文期刊>Journal of computer security >Embedding agents within the intruder to detect parallel attacks
【24h】

Embedding agents within the intruder to detect parallel attacks

机译:在入侵者中嵌入代理以检测并行攻击

获取原文
获取原文并翻译 | 示例
           

摘要

We carry forward the work described in our previous papers on the application of data independence to the model checking of security protocols using CSP and FDR. In particular, we showed how techniques based on data independence could be used to justify, by means of a finite FDR check, systems where agents can perform an unbounded number of protocol runs. Whilst this allows for a more complete analysis, there was one significant incompleteness in the results we obtained: while each individual identity could perform an unlimited number of protocol runs sequentially, the degree of parallelism remained bounded (and small to avoid state space explosion). In this paper, we report significant progress towards the solution of this problem, by means anticipated in [5], namely by "internalising" protocol roles within the "intruder" process. The internalisation of protocol roles (initially only server-type roles) was introduced in [20] as a state-space reduction technique (for which it is usually spectacularly successful). It was quickly noticed that this had the beneficial side-effect of making the internalised server arbitrarily parallel, at least in cases where it did not generate any new values of data independent type. We now consider the case where internal roles do introduce fresh values and address the issue of capturing their state of mind (for the purposes of analysis).
机译:我们继续进行先前论文中描述的有关将数据独立性应用于使用CSP和FDR的安全协议的模型检查的工作。特别是,我们展示了如何使用基于数据独立性的技术通过有限的FDR检查来证明代理可以执行无数次协议运行的系统是合理的。尽管这可以进行更完整的分析,但我们获得的结果中存在一个显着的不完整之处:尽管每个个体标识都可以按顺序执行无限数量的协议运行,但是并行度仍然有限​​(并且很小,可以避免状态空间爆炸)。在本文中,我们通过[5]中预期的方法,即通过“入侵者”过程中的“内部化”协议角色,报告了解决该问题的重要进展。协议角色的内部化(最初仅是服务器类型的角色)是在[20]中作为状态空间缩减技术引入的(通常对此非常成功)。很快就注意到,这至少在没有生成任何新的数据独立类型值的情况下,具有使内部化服务器任意并行的有益副作用。现在,我们考虑内部角色确实引入新价值并解决捕获其心态问题的情况(出于分析目的)。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号