基于攻击者的“角色冒充”的协议验证方法

Formal authentication based on identification of intruder role impersonate

网络的普及使得网络安全问题日益重要 ,协议的安全性和密码算法的安全性是网络数据安全的两个最基本的概念。介绍了几种具有代表性的安全协议的形式化验证工具 ,并提供了用 JAVA语言实现的基于攻击者和秘密的安全协议验证算法。提出了身份验证协议必须交换秘密的概念 ,还为协议的形式化验证过程设计了框架。

The size of computer networks has made network security a critical issue. Protocol security and algorithm security are two fundamental aspects of network data security. This paper introduces some classical formal authentication tools for security protocols, and describes an authentication algorithm for security protocol based on intruder identification and security implementation using JAVA. The paper discusses the important idea that an authentication protocol must exchange some secrets and presents a process for protocol authentication which is a variation of a security protocol based on the identification of the intruder and the role that he is assoming. The authentication tool then implements a falsification job.