NDLI: An adaptive threat model for security ceremonies

Content Provider	Springer Nature Link
Author	Martina, Jean Everson Santos, Eduardo Carlos, Marcelo Carlomag Price, Geraint Custódio, Ricardo Felipe
Copyright Year	2014
Abstract	Ever since Needham and Schroeder introduced the notion of an active attacker, significant research has been conducted regarding protocol design and analysis to verify that the protocols’ goals are robust against this type of attacker. Nowadays, the Dolev–Yao threat model is the most widely accepted attacker model for the analysis of security protocols. Consequently, there are several security protocols considered secure against an attacker under Dolev–Yao’s assumptions. With the introduction of the concept of ceremonies, which extends protocol design and analysis to include human peers, we can potentially find and solve security flaws that were previously not detectable. In this paper, we discuss that even though Dolev–Yao’s threat model can represent the most powerful attacker possible in a ceremony, the attacker in this model is not realistic in certain scenarios, especially those related to human peers. We propose a dynamic threat model that can be adjusted according to each ceremony and consequently adapt the model and the ceremony analysis to realistic scenarios. We demonstrate the feasibility of our approach with a support implementation using first-order logic and an automatic theorem prover.
Starting Page	103
Ending Page	121
Page Count	19
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	14
Issue Number	2
e-ISSN	16155270
Language	English
Publisher	Springer Berlin Heidelberg
Publisher Date	2014-08-07
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Threat models Security ceremonies Security protocols Formal verification and specification Data Encryption Computer Communication Networks Operating Systems Coding and Information Theory Management of Computing and Information Systems Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Verifying multicast-based security protocols using the inductive method

A symbolic framework for multi-faceted security protocol analysis

OFMC: A symbolic model checker for security protocols

An overview of the verification of SET

Rigorous automated network security management

Specifying and implementing privacy-preserving cryptographic protocols

Computer security

Security in cloud computing

A calculus for control flow analysis of security protocols

An adaptive threat model for security ceremonies

Similar Documents

Verifying multicast-based security protocols using the inductive method

A symbolic framework for multi-faceted security protocol analysis

OFMC: A symbolic model checker for security protocols

An overview of the verification of SET

Rigorous automated network security management

Specifying and implementing privacy-preserving cryptographic protocols

Computer security

Security in cloud computing

A calculus for control flow analysis of security protocols

An adaptive threat model for security ceremonies