Sequential protocol composition in Maude-NPA

Protocols do not work alone, but together, one protocol relying on another to provide needed services. Many of the problems in cryptographic protocols arise when such composition is done incorrectly or is not well understood. In this thesis, we discuss an extension to the current syntax and operatio...

Descripción completa

Detalles Bibliográficos
Autor: Santiago Pinazo, Sonia
Tipo de recurso: tesis de maestría
Fecha de publicación:2010
País:España
Institución:Universitat Politècnica de València (UPV)
Repositorio:RiuNet. Repositorio Institucional de la Universitat Politécnica de Valéncia
Idioma:inglés
OAI Identifier:oai:riunet.upv.es:10251/13969
Acceso en línea:https://riunet.upv.es/handle/10251/13969
Access Level:acceso abierto
Palabra clave:Sequential protocol composition
Maude-npa
Cryptographic protocols
Maude-npa gui
LENGUAJES Y SISTEMAS INFORMATICOS
Máster Universitario en Ingeniería del Software, Métodos Formales y Sistemas de Información-Màster Universitari en Enginyeria del Programari, Mètodes Formals i Sistemes D&apos
Informació
Descripción
Sumario:Protocols do not work alone, but together, one protocol relying on another to provide needed services. Many of the problems in cryptographic protocols arise when such composition is done incorrectly or is not well understood. In this thesis, we discuss an extension to the current syntax and operational semantics of the Maude-NPA, a protocol specification and analysis tool, to support dynamic sequential composition of protocols, so that protocols can be specified separately and composed when desired. This allows one to reason about many different compositions with minimal changes to the specification. Moreover, we show that, by a simple protocol transformation, we are able to analyze and verify this dynamic composition in the current Maude-NPA without any modification to the tool. We prove soundness and completeness of the protocol transformation with respect to the extended operational semantics, for protocol composition. Finally, we illustrate our work on some examples of protocol composition and provide some experimental results.