An attribute-driven security protocol symbolic model detection method and system

Abstract

The invention provides an attribute-driven security protocol symbolic model detection method, system and medium. The method includes: step S1, obtaining the state machine model and the process calculus model of the security protocol respectively; step S2, configuring the timing properties of the security protocol, the timing properties are determined by the time operator and logic operator of the timing logic To describe; step S3, verify the timing properties based on the state machine model, to obtain existing counterexamples; step S4, refine the timing properties based on the counterexamples to obtain security properties, call the ProVerif security protocol verifier, The security properties are verified based on the process calculus model. The method can improve the correctness of the traditional model detection in the verification of the timing of the security protocol, effectively avoid false negative examples, and make up for the problem that the formal verification tool of the security protocol cannot model and analyze the timing.

Description

technical field [0001] The invention relates to the field of protocol verification, in particular to an attribute-driven security protocol symbolic model detection method and system. Background technique [0002] General symbolic model checking technology has achieved remarkable success in computer hardware, control system and so on. In terms of security protocol verification, general model checking technology can be used to verify the timing properties of security protocols, especially the liveness of the verification protocol. It uses the state transition system of the security protocol as an analysis model to analyze the timing properties of the protocol, so as to verify the security properties that the security protocol should satisfy. [0003] Security protocols generally have complex cryptographic mechanisms, and general symbolic model detection cannot analyze the relationship between cryptographic operations. For example, if a state in the model receives a symmetric...

AI Technical Summary

Problems solved by technology

[0009] The purpose of the present invention is to provide an attribute-driven security protocol symbolic model detection scheme to solve the problem of false negative examples in the security protocol verification method of general symbolic model detection in the prior art, and the inability of the security protocol formal verification tool to check the time sequence Technical issues of modeling and analysis

Images