Table of Contents
Table of Contents0. Introduction.
Public-key certificates and infrastructures.
Cryptographic hash functions.
Security protocol vulnerabilities.
The CSP approach.
Casper: the user-friendly interface of FDR.
Limits of formal analysis.
Summary. 1. An introduction to CSP.
Basic building blocks.
Hiding and renaming.
Discrete time. 2. Modelling security protocols in CSP.
Data types for protocol models.
Modelling an intruder.
Putting the network together. 3. Expressing protocol goals.
The Yahalom protocol.
Summary. 4. Overview of FDR.
Labelled Transition Systems.
Exploiting compositional structure.
Counterexamples. 5. Casper.
An example input file.
Case study: the Wide-Mouthed-Frog protocol.
Hash functions and Vernam encryption.
Summary. 6. Encoding protocols and intruders for FDR.
CSP from Casper.
Modelling the intruder: the perfect spy.
Wiring the network together.
Example deduction system.
Specifying desired properties. 7. Theorem proving.
Secrecy of the shared key: a rank function.
Secrecy on nB.
Summary. 8. Simplifying transformations.
Simplifying transformations for protocols.
Transformations on protocols.
Examples of safe simplifying transformations.
Case study: The CyberCash Main Sequence protocol.
Summary. 9. Other approaches.
The Dolev-Yao model.
BAN logic and derivatives.
FDM and InaJo.
The B-method approach.
The non-interference approach.
The inductive approach.
Provable security. 10. Prospects and wider issues.
Abstraction of cryptographic primitives.
The refinement problem.
Combining formal and cryptographic styles of analysis.
Dependence on infrastructure assumptions.
Conference and group keying.
Data independence. Appendix A. Background cryptography.
The RSA algorithm.
The ElGamal public key system.
Complexity theory. Appendix B. The Yahalom protocol in Casper.
The Casper input file.
Casper output. Appendix C. CyberCash rank function analysis.
Authentication. Bibliography. Notation. Index.
Security protocols are one of the most critical elements in enabling the secure communication and processing of information, ensuring its confidentiality, integrity, authenticity and availability. These protocols are vulnerable to a host of subtle attacks, so designing protocols to be impervious to such attacks has proved to be extremely challenging and error prone.
This book provides a thorough and detailed understanding of one of the most effective approaches to the design and evaluation of security critical systems, describing the role of security protocols in distributed secure systems and the vulnerabilities to which they are prey.
The authors introduce security protocols, the role they play and the cryptographic mechanisms they employ, and detail their role in security architectures, e-commerce, e-cash etc. Precise characterizations of key concepts in information security, such as confidentiality, authentication and integrity are introduced and a range of tools and techniques are described which will ensure that a protocol guarantees certain security services under appropriate assumptions.
Modeling and Analysis of Security Protocols provides:
- An in-depth discussion of the nature and role of security protocols and their vulnerabilities.
- A rigorous framework in which security protocols and properties can be defined in detail.
- An understanding of the tools and techniques used to design and evaluate security protocols.