Paper Info
Title
Understanding security goals provided by crypto-protocol implementations
Abstract
Understanding the security goals provided by cryptographic protocol implementations is known to be difficult, since security requirements such as secrecy, integrity and authenticity of data are notoriously hard to establish, especially in the presence of cryptographic interactions. A lot of research has been devoted to develop formal techniques to analyze abstract specifications of cryptographic protocols. Less attention has been paid to the source code analysis of legacy crypto-protocol implementations, for which specifications are often not available. This is an important challenge since it is non-trivial to determine from a given protocol implementation exactly which security goals are achieved, which is necessary for a reliable maintenance of security-critical systems. In this paper, we propose an approach to determine security goals provided by an implemented protocol based on control flow graphs and automated theorem provers for first-order logic.
Year
DOI
Venue
2005
10.1109/ICSM.2005.97
ICSM
Keywords
DocType
ISSN
cryptographic protocol implementation,protocols,control flow graph,abstract specificationsof cryptographic protocol,cryptography,software reliability,crypto-protocol implementations,security requirement,source code analysis,security goal,legacy crypto-protocol implementation,formal technique,software maintenance,automated theorem provers,understanding security,cryptographic interaction,protocol implementation,first-order logic,safety-critical software,automated theorem prover,security-critical system,formal specification,formal verification,first order logic,cryptographic protocol,theorem prover
Conference
1063-6773
ISBN
Citations 
PageRank 
0-7695-2368-4
1
0.37
References 
Authors
7
1
Name
Order
Citations
PageRank
Jan Jurjens116916.07