| Title:
|
Entity Authentication:Analysis using Structured Intuition |
| Type:
|
Conference abstract in proceedingsConference abstract in proceedings |
| Participant(s):
|
Technical University of Denmark
Email:
Technical University of Denmark
Email:
|
| Abstract:
|
In this paper, we propose a new method for the analysis that uses intuition of the analyst in a structured way. First we define entity authentication in terms of fine level authentication goals (FLAGs). Then we use some relevant structures in protocol narrations and use them to justify FLAGs for the protocol. All along this process, we discover vulnerabilities and unstated assumptions of the protocol.
As the method is intuition based, the quality of results depends on the expertise of the security analyst, however, the structured intuition has two major advantages: Firstly we get a precise specification of security in terms of FLAGs; and secondly the outcome can be used to transform
basic protocol narrations into more detailed specifications, which makes a subsequent formal analysis much more meaningful. |
| Published:
|
part of: Technical Report on NODES10 Proceedings, 2010, |
| Presented at:
|
4th Nordic Workshop on Dependability and Security, Copenhagen |
|