What makes a cryptographic protocol secure? the evolution of requirements specification in formal cryptographic protocol analysis

Authors:
Catherine Meadows
Affiliations:
Naval Research Laboratory, Center for High Assurance Computer Systems, Washington, DC
Venue:
ESOP'03 Proceedings of the 12th European conference on Programming
Year:
2003

Citing 20
Cited 4

The Interrogator: Protocol Secuity Analysis

IEEE Transactions on Software Engineering - Special issue on computer security and privacy
A logic of authentication

ACM Transactions on Computer Systems (TOCS)
Authentication and authenticated key exchanges

Designs, Codes and Cryptography
Entity authentication and key distribution

CRYPTO '93 Proceedings of the 13th annual international cryptology conference on Advances in cryptology
A Formal Language for Cryptographic Protocol Requirements

Designs, Codes and Cryptography - Special issue dedicated to Gustavus J. Simmons
Secrecy by typing in security protocols

Journal of the ACM (JACM)
A cost-based framework for analysis of denial of service in networks

Journal of Computer Security
Formalizing GDOI group key management requirements in NPATRL

CCS '01 Proceedings of the 8th ACM conference on Computer and Communications Security
Systematic Design of Two-Party Authentication Protocols

CRYPTO '91 Proceedings of the 11th Annual International Cryptology Conference on Advances in Cryptology
Rational Exchange - A Formal Model Based on Game Theory

WELCOM '01 Proceedings of the Second International Workshop on Electronic Commerce
A Formal Specification of Requirements for Payment Transactions in the SET Protocol

FC '98 Proceedings of the Second International Conference on Financial Cryptography
Some new attacks upon security protocols

CSFW '96 Proceedings of the 9th IEEE workshop on Computer Security Foundations
Intensional specifications of security protocols

CSFW '96 Proceedings of the 9th IEEE workshop on Computer Security Foundations
A Hierarchy of Authentication Specifications

CSFW '97 Proceedings of the 10th IEEE workshop on Computer Security Foundations
Probabilistic Analysis of Anonymity

CSFW '02 Proceedings of the 15th IEEE workshop on Computer Security Foundations
Authenticity by Typing for Security Protocols

CSFW '01 Proceedings of the 14th IEEE workshop on Computer Security Foundations
A Logical Language for Specifying Cryptographic Protocol Requirements

SP '93 Proceedings of the 1993 IEEE Symposium on Security and Privacy
Security Properties and CSP

SP '96 Proceedings of the 1996 IEEE Symposium on Security and Privacy
Reconciling Two Views of Cryptography (The Computational Soundness of Formal Encryption)

Journal of Cryptology
Typing one-to-one and one-to-many correspondences in security protocols

ISSS'02 Proceedings of the 2002 Mext-NSF-JSPS international conference on Software security: theories and systems

Secrecy by interpretation functions

Knowledge-Based Systems
Interpretation functions-based method to verify secrecy under equational theories

TELE-INFO'08 Proceedings of the 7th WSEAS International Conference on Telecommunications and Informatics
Secrecy of cryptographic protocols under equational theory

Knowledge-Based Systems
Specifying authentication using signal events in CSP

CISC'05 Proceedings of the First SKLOIS conference on Information Security and Cryptology

Quantified Score

Hi-index	0.00

Visualization

Abstract

Much attention has been paid to the design of languages for the specification of cryptographic protocols. However, the ability to specify their desired behavior correctly is also important; indeed many perceived protocol flaws arise out of a misunderstanding of the protocol's requirements. In this talk we give a brief survey of the history of requirements specification in formal analysis of cryptographic protocols. We outline the main approaches and describe some of the open issues.