Conference proceeding
An Extended UML Method for the Verification of Security Protocols
19th International Conference on Engineering of Complex Computer Systems, pp.19-28
IEEE International Conference on Engineering of Complex Computer Systems-ICECCS
International Conference on Engineering of Complex Computer Systems, 19th (Tianjin, China, 04/08/2014 - 07/08/2014)
2014
Metrics
1 Record Views
Abstract
This paper presents a formal modeling method of security protocols based on the extended UML framework. In order to simplify the process and reduce the difficulty of security protocol modelling, extending mechanisms for the class diagram and sequence diagram of UML are presented, which provide an engineering specification for the security protocol formalizing. Therefore, for verifying the confidentiality and correspondence of security protocols by ProVerif, a transformation from extended UML model to ProVerif Spi calculus model is realized with matching rules and knowledge reasoning, and then the verifying results are analyzed through a regular expression. Finally, the handshake, NS public key and buyer-seller watermarking protocols are verified, the attack traces of unsatisfied security properties are exported, that show the validity and applicability of the approach provided by this paper.
Details
- Title
- An Extended UML Method for the Verification of Security Protocols
- Creators
- Gang Shen - Tianjin UniversityXiaohong Li - Tianjin UniversityRuitao Feng - Tianjin UniversityGuangquan Xu - Tianjin UniversityJing Hu - Tianjin UniversityZhiyong Feng - Tianjin University
- Publication Details
- 19th International Conference on Engineering of Complex Computer Systems, pp.19-28
- Conference
- International Conference on Engineering of Complex Computer Systems, 19th (Tianjin, China, 04/08/2014 - 07/08/2014)
- Series
- IEEE International Conference on Engineering of Complex Computer Systems-ICECCS
- Publisher
- IEEE
- Number of pages
- 10
- Identifiers
- 991013214783002368
- Academic Unit
- Information Technology; Faculty of Science and Engineering
- Language
- English
- Resource Type
- Conference proceeding