On communication models when verifying equivalence properties

Abstract : Symbolic models for security protocol verification, following the sem-inal ideas of Dolev and Yao, come in many flavors, even though they share the same ideas. A common assumption is that the attacker has complete control over the network: he can therefore intercept any message. Depending on the precise model this may be reflected either by the fact that any protocol output is directly routed to the adversary, or communications may be among any two participants, including the attacker — the scheduling between which exact parties the communication happens is left to the attacker. These two models may seem equivalent at first glance and, depending on the verification tools, either one or the other semantics is implemented. We show that, unsurprisingly, they indeed coincide for reachability properties. However, when we consider indistinguishability properties, we prove that these two semantics are incomparable. We also introduce a new semantics, where internal communications are allowed but messages are always eavesdropped by the attacker. We show that this new semantics yields strictly stronger equivalence relations. We also identify two subclasses of protocols for which the three semantics coincide. Finally, we implemented verification of trace equivalence for each of these semantics in the APTE tool and compare their performances on several classical examples.
Type de document :
Communication dans un congrès
6th International Conference on Principles of Security and Trust (POST), Apr 2017, Uppsala, Sweden
Liste complète des métadonnées

Littérature citée [22 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/hal-01450898
Contributeur : Steve Kremer <>
Soumis le : mardi 31 janvier 2017 - 14:35:32
Dernière modification le : samedi 21 juillet 2018 - 14:12:01
Document(s) archivé(s) le : lundi 1 mai 2017 - 14:11:53

Fichier

main.pdf
Fichiers produits par l'(les) auteur(s)

Identifiants

  • HAL Id : hal-01450898, version 1

Relations

Citation

Kushal Babel, Vincent Cheval, Steve Kremer. On communication models when verifying equivalence properties. 6th International Conference on Principles of Security and Trust (POST), Apr 2017, Uppsala, Sweden. 〈hal-01450898〉

Partager

Métriques

Consultations de la notice

359

Téléchargements de fichiers

70