A little more conversation, a little less action, a lot more satisfaction: Global states in ProVerif

Abstract : ProVerif is a popular tool for the fully automatic analysis of security protocols, offering very good support to detect flaws or prove security. One exception is the case of protocols with global states such as counters, tables, or more generally, memory cells. ProVerif fails to analyse such protocols, due to its internal abstraction. Our key idea is to devise a generic transformation of the security properties queried to ProVerif. We prove the soundness of our transformation and implement it into a front-end GSVerif. Our experiments show that our front-end (combined with ProVerif) outperforms the few existing tools, both in terms of efficiency and protocol coverage. We successfully apply our tool to a dozen of protocols of the literature, yielding the first fully automatic proof of a security API and a payment protocol of the literature.
Document type :
Conference papers
Complete list of metadatas

Cited literature [35 references]  Display  Hide  Download

https://hal.inria.fr/hal-01900088
Contributor : Véronique Cortier <>
Submitted on : Saturday, October 20, 2018 - 9:52:10 PM
Last modification on : Tuesday, December 18, 2018 - 4:38:25 PM

File

CSF18-GSVerif-long(3).pdf
Files produced by the author(s)

Identifiers

  • HAL Id : hal-01900088, version 1

Collections

Citation

Vincent Cheval, Véronique Cortier, Mathieu Turuani. A little more conversation, a little less action, a lot more satisfaction: Global states in ProVerif. CSF'2018 - 31st IEEE Computer Security Foundations Symposium, Jul 2018, Oxford, United Kingdom. ⟨hal-01900088⟩

Share

Metrics

Record views

46

Files downloads

74