Formal Security Analysis with Interacting State Machines

  • Authors:
  • David von Oheimb;Volkmar Lotz

  • Affiliations:
  • -;-

  • Venue:
  • ESORICS '02 Proceedings of the 7th European Symposium on Research in Computer Security
  • Year:
  • 2002

Quantified Score

Hi-index 0.01

Visualization

Abstract

We introduce the ISM approach, a framework for modeling and verifying reactive systems in a formal, even machine-checked, way. The framework has been developed for applications in security analysis. It is based on the notion of Interacting State Machines (ISMs), sort of high-level Input/Output Automata. System models can be defined and presented graphically using the AutoFocus tool. They may be type-checked and translated to a representation within the theorem prover Isabelle or defined directly as Isabelle theories. The theorem prover may be used to perform any kind of syntactic and semantic checks, in particular semi-automatic verification. We demonstrate that the framework can be fruitfully applied for formal system analysis by two classical application examples: the LKW model of the Infineon SLE66 SmartCard chip and Lowe's fix of the Needham-Schroeder Public-Key Protocol.