Relating Strands and Multiset Rewriting for Security Protocol Analysis

  • Authors:
  • Nancy Durgin;Patrick Lincoln;John Mitchell;Andre Scedrov;Iliano Cervesato

  • Affiliations:
  • -;-;-;-;-

  • Venue:
  • CSFW '00 Proceedings of the 13th IEEE workshop on Computer Security Foundations
  • Year:
  • 2000

Quantified Score

Hi-index 0.00

Visualization

Abstract

Formal analysis of security protocols is largely based on a set of assumptions commonly referred to as the Dolev-Yao model. Two formalisms that state the basic assumptions of this model are related here: strand spaces and multiset rewriting with existential quantification. Although it is intuitive that these two languages should be equivalent in some way, a number of modifications to each system are required to obtain a meaningful equivalence. We extend the strand formalism with a way of incrementally growing bundles in order to emulate an execution of a protocol with parametric strands. We omit the initialization part of the multiset rewriting setting, which formalizes the choice of initial data, such as shared public or private keys, and which has no counterpart in the strand space setting. The correspondence between the modified formalisms directly relates the intruder theory from the multiset rewriting formalism to the penetrator strands.