TAuth: Verifying timed security protocols

• Main Authors: LI, Li, SUN, Jun, LIU, Yang, DONG, Jin Song
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2014
• Subjects: False Alarm; Timing Constraint; Service Composition; Service Basis; Authentication Protocol; Software Engineering
• Online Access: https://ink.library.smu.edu.sg/sis_research/4987; https://ink.library.smu.edu.sg/context/sis_research/article/5990/viewcontent/tauth.pdf
• Institution: Singapore Management University

Quantitative timing is often relevant to the security of systems, like web applications, cyber-physical systems, etc. Verifying timed security protocols is however challenging as both arbitrary attacking behaviors and quantitative timing may lead to undecidability. In this work, we develop a service framework to support intuitive modeling of the timed protocol, as well as automatic verification with an unbounded number of sessions. The partial soundness and completeness of our verification algorithms are formally defined and proved. We implement our method into a tool called TAuth and the experiment results show that our approach is efficient and effective in both finding security flaws and giving proofs.