Close menu

SURE

Sunderland Repository records the research produced by the University of Sunderland including practice-based research and theses.

Security Protocol Specification and Verification with AnBx

This is the latest version of this item.

Bugliesi, Michele, Calzavara, Stefano, Mödersheim, Sebastian and Modesti, Paolo (2016) Security Protocol Specification and Verification with AnBx. Journal of Information Security and Applications, 30. pp. 46-63. ISSN 2214-2126

Item Type: Article

Abstract

Designing distributed protocols is complex and requires actions at very different levels: from the design of an interaction flow supporting the desired application-specific guarantees, to the selection of the most appropriate network-level protection mechanisms.
To tame this complexity, we propose AnBx, a formal protocol specification language based on the popular Alice & Bob notation. AnBx offers channels as the main abstraction for communication, providing different authenticity and/or confidentiality guarantees for message transmission.
AnBx extends existing proposals in the literature with a novel notion of forwarding channels, enforcing specific security guarantees from the message originator to the final recipient along a number of intermediate forwarding agents. We give a formal semantics of AnBx in terms of a state transition system expressed in the AVISPA Intermediate Format. We devise an ideal channel model
and a possible cryptographic implementation, and we show that, under mild restrictions, the two representations coincide, thus making AnBx amenable to automated verification with different tools. We demonstrate the benefits of the declarative specification style distinctive of AnBx by revisiting the design of two existing e-payment protocols, iKP and SET.

[img]
Preview
PDF
jisa2016.pdf - Accepted Version

Download (455kB) | Preview

More Information

Related URLs:
Depositing User: Paolo Modesti

Identifiers

Item ID: 6635
Identification Number: https://doi.org/10.1016/j.jisa.2016.05.004
ISSN: 2214-2126
URI: http://sure.sunderland.ac.uk/id/eprint/6635
Official URL: http://dx.doi.org/10.1016/j.jisa.2016.05.004

Users with ORCIDS

Catalogue record

Date Deposited: 27 Sep 2016 07:49
Last Modified: 02 Jul 2019 09:11

Contributors

Author: Michele Bugliesi
Author: Stefano Calzavara
Author: Sebastian Mödersheim
Author: Paolo Modesti

University Divisions

Faculty of Technology > School of Computer Science

Subjects

Computing > Cybersecurity
Computing > Network Computing
Computing > Programming

Actions (login required)

View Item (Repository Staff Only) View Item (Repository Staff Only)

Available Versions of this Item