Security protocol analysis method and device

Abstract

The invention discloses a security protocol analysis method and a security protocol analysis device. The security protocol analysis method mainly comprises the following steps of: initializing a security protocol, generating a subsequent state by adopting a subsequent generation algorithm, judging whether the subsequent state is an insecure state, giving a path from an initial state to the subsequent state if the subsequent state is the insecure state, and finishing a flow if the subsequent state is not the insecure state, wherein an attacker knowledge analysis algorithm introducing special algebraic properties is called by the subsequent generation algorithm for attacker deduction problems. In the security protocol analysis method provided by the invention, the processing of the algebraic properties of password operators is added, and the message processing capability of DY attackers, so attacks caused by the algebraic properties can be detected; and the method is applied to most of current security protocol analysis in which password primitives with the special algebraic properties are used, and the success rate of the analysis is greatly increased.

Description

technical field [0001] The present application relates to the technical field of network security, in particular to a security protocol analysis method and device. Background technique [0002] With the widespread application of computer networks in many fields such as politics, economy, and military affairs, the security of information in computer networks has become a crucial issue. The security protocol is based on cryptographic algorithms and establishes a secure information transmission channel for all parties involved in secure communication. It can achieve key distribution, identity and message authentication, behavior non-repudiation, and secure electronic transactions. However, due to the openness of the computer network itself, there are various serious security threats in the network. Attackers can conduct various attacks on the security protocol through interception, insertion, tampering, forgery, counterfeiting, etc., and destroy the security goal of the securi...

AI Technical Summary

Problems solved by technology

(2) The attack of the security protocol may occur on the algebraic properties of some cryptographic primitives. For example, when the NSL protocol does not consider the algebraic properties, the analysis result of the NSL protocol is safe, but after the algebraic properties are introduced, the attacker I can use the encryption operation Under the EBC or CBC system, the nature of the associative law is satisfied, and authentication attacks are generated

[0005] At present, most of the domestic security protocol formal models and their automated analysis tools do not consider the special algebraic properties of the protocol, which may lead to the omission of potential attack instances

Some models only conduct theoretical analysis for individual special algebraic properties, usually with strong restrictions, and the search for the attacker's knowledge set basically uses the enumeration method, which is difficult to achieve automatic analysis

[0006] Through the research on the prior art, the inventor found that: most of the domestic security protocol analysis methods do not consider the special algebraic properties of the agreement, so that it may lead to the omission of potential attack instances generated by the algebraic properties of the cryptographic operators, so the success The probability of analysis is not high; some models only analyze some special algebraic properties, usually focusing on a few operation symbols such as XOR and multiplication, and may miss some hidden attacks, so the probability of successful analysis is not high

Images