Attribute-driven security protocol symbolization model detection method and system

Abstract

The invention provides an attribute-driven security protocol symbolization model detection method and system and a medium. The method comprises the following steps: S1, respectively acquiring a state machine model and a process calculation model of the security protocol; S2, configuring a time sequence property of the security protocol, wherein the time sequence property is described by a time operator and a logic operator of time sequence logic; S3, verifying the time sequence property based on the state machine model to obtain an existing counter example; and S4, refining the time sequence property based on the counter example to obtain a security property, calling a ProVeif security protocol verifier, and verifying the security property based on the process calculation model. According to the method, the correctness of traditional model detection in the aspect of security protocol time sequence verification can be improved, the condition of false counter examples is effectively avoided, and the problem that a security protocol formal verification tool cannot perform time sequence modeling and analysis is solved.

Description

technical field [0001] The invention relates to the field of protocol verification, in particular to an attribute-driven security protocol symbolic model detection method and system. Background technique [0002] General symbolic model checking technology has achieved remarkable success in computer hardware, control system and so on. In terms of security protocol verification, general model checking technology can be used to verify the timing properties of security protocols, especially the liveness of the verification protocol. It uses the state transition system of the security protocol as an analysis model to analyze the timing properties of the protocol, so as to verify the security properties that the security protocol should satisfy. [0003] Security protocols generally have complex cryptographic mechanisms, and general symbolic model detection cannot analyze the relationship between cryptographic operations. For example, if a state in the model receives a symmetric...

AI Technical Summary

Problems solved by technology

[0009] The purpose of the present invention is to provide an attribute-driven security protocol symbolic model detection scheme to solve the problem of false negative examples in the security protocol verification method of general symbolic model detection in the prior art, and the inability of the security protocol formal verification tool to check the time sequence Technical issues of modeling and analysis

Images