安全协议系统安全属性定量计算方法

A quantitative approach for computing the security property of security protocol system

定量分析安全协议系统是保证协议安全的必要环节。根据建立的安全协议系统的SMRP模型,给出了安全协议系统安全属性的计算方法,并从攻击者的角度讨论其累积报酬计算问题,通过NS协议(公钥协议)实例给出了分析过程,很好地解释了以NS协议为基础的安全协议系统未产生重大损失的原因。结果表明,SMRP模型可以较好地定量分析安全协议系统。

Quantitative computing is of great importance in security evaluation. The problem of quantitatively computing the security property of a security protocol system is discussed. A SMRP model for security protocol systems is proposed, based on which an approach to solving the problem is given. From the viewpoint of an attacker, the approach discusses the computation of the accumulated rewards of the attacker. As an example, the NS protocol is analyzed. The analysis result explains the reason why the security protocol system based NS protocol couldn＇t have incurred a great loss.