Timed analysis of security protocols

Issue title: Formal Methods in Security Engineering Workshop (FMSE 04)

Article type: Research Article

Authors: Corin, R. | Etalle, S. | Hartel, P.H. | Mader, A.

Affiliations: University of Twente, The Netherlands. E-mail: ricardo.corin@utwente.nl

Abstract: We propose a method for engineering security protocols that are aware of timing aspects. We study a simplified version of the well-known Needham Schroeder protocol and the complete Yahalom protocol, where timing information allows the study of different attack scenarios. We model check the protocols using UPPAAL. Further, a taxonomy is obtained by studying and categorising protocols from the well known Clark Jacob library and the Security Protocol Open Repository (SPORE) library. Finally, we present some new challenges and threats that arise when considering time in the analysis, by providing a novel protocol that uses time challenges and exposing a timing attack over an implementation of an existing security protocol.

Keywords: Timed automata, security protocols, model checking

DOI: 10.3233/JCS-2007-15603

Journal: Journal of Computer Security, vol. 15, no. 6, pp. 619-645, 2007