安全协议自动验证工具的状态空间剪枝

State space pruning in automatic verification of security protocol

串空间模型是分析安全协议的一种实用、直观和严格的形式化方法。概述基于该模型结合使用定理证明和模型检测技术开发的安全协议验证工具AVSP的体系结构 ,提出一些剪枝规则对状态搜索空间进行剪枝。通过Needham Schroeder安全协议的弱一致性认证属性验证过程来表明这些状态搜索空间剪枝规则可有效缩小状态搜索空间 。

Strand Space Model (SSM) is a practical, intuitive and strict formal method for security protocol analysis. Based on SSM, we presented the frame of an automatic verification system of security protocol, AVSP, combined with theorem proving and model checking. We emphasized pruning methods of the state space in it. The experiment results got by authentic property verification of Needham-Schroeder show that these pruning methods can perfectly reduce state search space and prevent state explosion.