A Model Checking Method for Security Exchange Protocol

Abstract

The invention discloses a method for detecting a security exchange protocol model. The steps of the method include: 1) constructing a security exchange protocol model; 2) constructing a security attribute model; 3) constructing an attacker model; 4) state reduction and model detection. Compared with the prior art, the present invention can verify the security attributes of the protocol by modeling the security exchange protocol and its fairness and non-repudiation, and improve The verification effect is achieved, and the state reduction is realized, the state explosion problem is solved, and the model detection system is finally realized, which is convenient to use.

Description

technical field [0001] The invention relates to the field of mobile security, in particular to a hybrid detection technology combining software static detection and dynamic detection, which can detect malicious software based on an attack tree. Background technique [0002] With the development of computer technology and network technology, e-commerce has penetrated into all aspects of daily life and work, such as e-government, personal online shopping, enterprise e-commerce, contract signing and e-auction. However, with the development of network technology, Internet security issues have become more and more serious, and have further affected the development of e-commerce. As the cornerstone of e-commerce, the security and fairness of security exchange protocols are increasingly important, and have become a hot spot in the field of security research. According to the different purposes of the agreement, the fair exchange agreement can be divided into email authentication a...

AI Technical Summary

Problems solved by technology

In recent years, there have been more and more researches on the formal verification of security protocols. The main research methods include methods based on logical reasoning, methods based on theorem proving, string space methods, and model checking methods, and many automated security protocols have been developed. Verification tools, such as Athena, ProVerif, Murphi, and AVISPA, etc., these tools have a good effect on the verification of the secrecy and authentication of security protocols, but have certain limitations on fairness and non-repudiation, for example, they cannot Modeling of cryptographic primitives, failure to introduce attacker model or attacker model is not suitable for verification of some security properties, etc.

Images