A verification method and system for formalization of security protocols

Abstract

The present invention relates to a verification method and system for the formalization of a safety protocol, and relates to the technical field of network safety. The method includes: describing the safety protocol to be verified, obtaining the safety protocol specification; The protocol configuration object builds the protocol model; builds the attacker model based on the protocol model, and optimizes the attacker model; describes the security attributes of the security protocol according to the linear temporal logic; builds the communication environment based on the optimized attacker model, and in the communication environment Verify whether the protocol model satisfies the security properties through the model detector SPIN, if not, the model detector SPIN outputs the attack path. The invention can model different types of security protocols, has universality, can automatically verify the security of security protocols, and has automaticity.

Description

technical field [0001] The present invention mainly relates to the technical field of network security, in particular to a verification method and system for formalizing security protocols. Background technique [0002] At present, most of the security protocols are modeled using the SPIN model, which requires manual coding and takes a lot of time, and different protocols need to rewrite the modeling code, which is highly repetitive, inefficient, and error-prone. In the automated modeling scheme for security protocol analysis, the protocol description language used is relatively complex and difficult to write, and users need to spend a high learning cost. [0003] At present, in the modeling of the attacker, the static analysis method and the dynamic message construction method are used to construct the attack message. Disadvantages of the static analysis method: It is necessary to manually analyze the protocol message flow in advance, and separately analyze the messages th...

AI Technical Summary

Problems solved by technology

Disadvantages of the static analysis method: it is necessary to manually analyze the protocol message flow in advance, and separately analyze the messages that can be intercepted by the attacker and the message set that the honest subject of the protocol needs to send, which is heavy workload and error-prone

Disadvantages of the dynamic construction method: the message fields are randomly filled, the construction method is purposeless, a large number of invalid messages are generated, and the number of states is too large, which easily leads to the problem of model detection state explosion

Images