对几类重要网络安全协议形式模型的分析

Towards Analyzing Some Kinds of Critically Formal Models for Network Security Protocols

该文根据建模基础的不同,对目前处在研究热点中的几个重要协议形式模型进行了分类分析.它们可以分为4类:基于知识演化系统的模型;基于规则推理系统的模型;基于代数演算系统的模型及基于计算复杂性理论的模型.对每类模型作者提出了相应的抽象特征体系,并在该体系下分析了有代表性的模型,指出了这些模型的优缺点及进一步改进的思路.抽象体系的提出不仅使模型的本质变得清晰,而且还使同类模型中的不同模型之间的联系变得易于理解;分析了不同类型模型之间可能存在的联系,特别是用基于规则推理的模型的思路改进了WooLam模型,在提出B模型抽象结构的同时,分析指出它极有可能发展成为一个统一各类模型的模型.

In this paper, some kinds of critically formal models for security protocols, which have recently caught much researcher's attentions, are analyzed in terms of their different modeling bases. They are categorized as four classes: The knowledge evolution system based models, the logic proof system supporting deducibility by means of rules based models, the algebraic calculating system based models, and the computing complexity theory based models. Corresponding to every class of models, an abstract framework is proposed. Under these frameworks, the representative models in every class are analyzed, and especially their advantages and disadvantages and the ways to improve them are discussed. These frameworks make model key components more clear, and make relationships between different models easily understandable. Authors also analyze the possible connection between distinct classes of models. Especially, authors use the way stemming from the class of model based on logic proof supporting deducibility by means of rules to improve Woo-Lam model. The analysis shows that the B model is very possible to be developed to be a model to unify all other classes of models.