Formalizing and Analyzing Security Ceremonies with Heterogeneous Devices in ANP and PDL - Inria - Institut national de recherche en sciences et technologies du numérique
Communication Dans Un Congrès Année : 2019

Formalizing and Analyzing Security Ceremonies with Heterogeneous Devices in ANP and PDL

Antonio González-Burgueño
  • Fonction : Auteur
  • PersonId : 1161222

Résumé

Security ceremonies extend cryptographic protocols with models of human users to allow us to take human behaviors into account when reasoning about security. Actor-network procedures (ANPs) are a well-known formal model of security ceremonies, and procedure derivation logic (PDL) allows us to reason logically about ANPs. In a security ceremony, different nodes may have different capabilities: computers can encrypt and decrypt messages, whereas humans cannot; a biometric device can capture biometric information, whereas a random number generator used in e-banking cannot; and so on. Furthermore, even if a node has the decryption capability, it must also know the encryption key to decrypt a message. ANPs do not support explicitly specifying node capabilities. In this paper, we extend ANPs to deal with heterogeneous devices by explicitly specifying the nodes’ capabilities. We also modify PDL to take into account the knowledge of participants at different points in time. All this allows us to reason about secrecy and authentication in ceremonies with different kinds of devices and human users.
Fichier principal
Vignette du fichier
490001_1_En_9_Chapter.pdf (681.34 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03769125 , version 1 (05-09-2022)

Licence

Identifiants

Citer

Antonio González-Burgueño, Peter Csaba Ölveczky. Formalizing and Analyzing Security Ceremonies with Heterogeneous Devices in ANP and PDL. 8th International Conference on Fundamentals of Software Engineering (FSEN), May 2019, Tehran, Iran. pp.129-144, ⟨10.1007/978-3-030-31517-7_9⟩. ⟨hal-03769125⟩
30 Consultations
85 Téléchargements

Altmetric

Partager

More