doi: 10.4304/jsw.3.5.40-54
Deciding the Correctness of Attacks on Authentication Protocols
- Department of Informatics, University of Oslo, Postbox 1080 Blindern, 0316 Oslo, Norway
Abstract
A new tool for automated validation of attackson authentication protocols has been used to find severalerrors and ambiguities in the list of attacks described in thewell known report by Clark and Jacob. In this paper theerrors are presented and classified. Corrected descriptionsof the incorrect attacks are given for the attacks that can beeasily repaired. The underlying method for finding errors inattacks is presented, including a formal language for attackspecification, a validation algorithm, and a framework forexecuting attacks. At the end of the paper, the connectionbetween validation and simulation is settled: Every attackspecification that can be successfully executed is valid.
Keywords
- Authentication protocols
- attacks
- valid
How to Cite
Anders Moen Hagalisletto, "Deciding the Correctness of Attacks on Authentication Protocols," Journal of Software, vol. 3, no. 5, pp. 40-54, 2008. https://doi.org/ 10.4304/jsw.3.5.40-54
Copyright & License
Copyright © 2008 by the authors. This is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited (CC BY 4.0).