NDLI: The principle of guarantee availability for security protocol analysis

Content Provider	Springer Nature Link
Author	Bella, Giampaolo
Copyright Year	2009
Abstract	Conformity to prudent design principles is an established approach to protocol correctness although it is not free of limitations. We term goal availability a design principle that is often implicitly followed, prescribing protocols to aim at principal-centric goals. Adherence to a design principle is normally established through protocol analysis that is an evaluation of whether a protocol achieves its goals. However, the literature shows that there exists no clear guidance on how to conduct and interpret such an analysis, a process that is only left to the analyzer’s skill and experience. Goal availability has the desirable feature that its supporting protocol analysis can be precisely guided by what becomes a principle of realistic analysis, which we call guarantee availability. It prescribes that the outcome of the analysis, which is the set of guarantees confirming the protocol goals, be practically applicable by the protocol participants. In consequence, the guarantees must be based on assumptions that the principals have the capacity to verify. Our focus then turns entirely to protocol analysis, because an analysis conforming to guarantee availability signifies that the analyzed protocol conforms to goal availability. Existing analysis of (both classical and deployed) protocols has been reconsidered with the aim of studying their conformity to guarantee availability. Some experiments clarify the relationships between goal availability and the existing design principles, with particular reference to explicitness. Other experiments demonstrate that boosting an analysis with guarantee availability generally makes it deeper, unveiling additional protocol niceties that depending on the analyzer’s skills may remain overseen otherwise. In particular, an established claim about a protocol (made using a well-known formal method) can be subverted.
Starting Page	83
Ending Page	97
Page Count	15
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	9
Issue Number	2
e-ISSN	16155270
Language	English
Publisher	Springer-Verlag
Publisher Date	2009-12-09
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Formal analysis Theorem proving Network protocol Trust Communications Engineering, Networks Management of Computing and Information Systems Coding and Information Theory Operating Systems Computer Communication Networks Data Encryption
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Analysis of e-commerce protocols: Adapting a traditional technique

Complete analysis of configuration rules to guarantee reliable network security policies

Offline firewall analysis

Rigorous automated network security management

A symbolic framework for multi-faceted security protocol analysis

Stochastic game net and applications in security analysis for enterprise network

Improving the ISO/IEC 11770 standard for key management techniques

Formal validation of automated policy refinement in the management of network security systems

Measuring protocol strength with security goals

The principle of guarantee availability for security protocol analysis

Similar Documents

Analysis of e-commerce protocols: Adapting a traditional technique

Complete analysis of configuration rules to guarantee reliable network security policies

Offline firewall analysis

Rigorous automated network security management

A symbolic framework for multi-faceted security protocol analysis

Stochastic game net and applications in security analysis for enterprise network

Improving the ISO/IEC 11770 standard for key management techniques

Formal validation of automated policy refinement in the management of network security systems

Measuring protocol strength with security goals

The principle of guarantee availability for security protocol analysis