安全协议扩展Petri网模型及检测

Extended Petri Nets Model and Detection of Security Protocols

协议安全性分析是网络安全的一个难题,运用形式方法对协议进行安全分析和检测,找出安全漏洞仍是该领域的研究热点。本文提出了一种新的基于扩展Petri网的安全协议建模方法,并且使用该方法对经典协议做了建摸、分析和检测,构造了攻击模型,证明了这种方法的有效性。

It is a hard problem to verify whether a security protocol is secure or not. Using formal methods to analyze protocols remains the key issue in this field. This paper proposes a new formal method in security protocol verification based on the extended Petri Nets . Then analyzes the classical security protocol and the model of attacker is established using this method. The efficiency of this method is proved.