形式化分析基于WebID的网络访问控制协议WAC安全性

Automatic Security Verification of Network Access Control Protocol Based on WebID

近些年,为了提高身份验证的安全性以及加强网络资源的访问控制的管理,人们引入了多种身份安全协议。由于身份验证已经成为一个热点问题,因此,首先介绍了基于WebID的网络访问控制,其次利用Applied PI演算对于基于WebID的网络访问控制进行形式化建模,再次把形式化建模转化为ProVerif的输入,最后运行ProVerif分析了基于WebID的网络访问控制。结果表明,该方法具有一定的认证能力。

In recent years,in order to improve the security of identity verification and strengthen the management of access control of network resources,a variety of identity security protocols have been introduced.Since identity verification has become a hot issue,first introduces WebID-based network access control,then uses Applied PI calculus to formally model WebID-based network access control,and then transforms the formal modeling into ProVerif's enter.Finally,run ProVerif to analyze the network access control based on WebID.The results show that this method has certain authentication capabilities.