摘要
针对安全协议形式化分析领域的五个公开问题之一的协议的组合性问题,选用并扩展了Athena分析方法,以求对组合协议进行自动分析。通过扩展了串、丛的概念以及逻辑和状态表示法,以描述多个协议的运行。考虑到从协议对主协议的影响,引入了串空间中理想的概念,给出了其自动生成算法,并扩展了后继状态函数。最后运用扩展后的Athena方法对Neuman Stubblebine协议进行了分析,发现协议部分对协议部分存在有攻击,相应给出了攻击路径。
Compositionality of security protocol is one of the five issues in security protocol formal analysis. In this paper, the novel approach of Athena in analyzing security protocol is extended for multi-protocol analysis. Firstly, in order to express the run of multi-protocol, the notions of strand and bound are developed. The logic and the state representation are extended. In response to the secondary protocol's influences on the primary protocol, we proposed the notion of strand space and its automatic constructed algorithm. In addition, the next-state function of Athena is extended. Finally, using the extended Athena approach, we found an attack from part Ⅱ to part Ⅰ when analyzing the Neuman Stubblebine protocol.
出处
《桂林电子科技大学学报》
2007年第4期274-278,共5页
Journal of Guilin University of Electronic Technology
基金
广西自然科学基金项目(0542052)