Improving the security of industrial networks by means of formal verification

  • Authors:
  • Ivan Cibrario Bertolotti;Luca Durante;Paolo Maggi;Riccardo Sisto;Adriano Valenzano

  • Affiliations:
  • IEIIT-CNR, c.so Duca degli Abruzzi 24, I-10129 Torino, Italy;IEIIT-CNR, c.so Duca degli Abruzzi 24, I-10129 Torino, Italy;Politecnico di Torino, c.so Duca degli Abruzzi 24, I-10129 Torino, Italy;Politecnico di Torino, c.so Duca degli Abruzzi 24, I-10129 Torino, Italy;IEIIT-CNR, c.so Duca degli Abruzzi 24, I-10129 Torino, Italy

  • Venue:
  • Computer Standards & Interfaces
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Computer networks are exposed to serious security threats that can even have catastrophic consequences from both the points of view of economy and safety if such networks control critical infrastructures, such as for example industrial plants. Security must then be considered as a fundamental issue starting from the earlier phases of the design of a system, and suitable techniques and tools should be adopted to satisfy the security-related requirements. The focus of this paper is on how formal methods can help in analysing the standard cryptographic protocols used to implement security-critical services such as authentication and secret keys distribution in critical environments. The analysis of the 802.11 shared key authentication protocol by S^3A, a fully automatic software tool that is based on a formal approach, is illustrated as a case study, which also highlights the peculiarities of analysing protocols based on wireless channels.