000 03500nam a22005055i 4500
001 978-3-540-78636-8
003 DE-He213
005 20140220083255.0
007 cr nn 008mamaa
008 121031s2012 gw | s |||| 0|eng d
020 _a9783540786368
_9978-3-540-78636-8
024 7 _a10.1007/978-3-540-78636-8
_2doi
050 4 _aQA76.9.D35
072 7 _aUMB
_2bicssc
072 7 _aURY
_2bicssc
072 7 _aCOM031000
_2bisacsh
082 0 4 _a005.74
_223
100 1 _aCremers, Cas.
_eauthor.
245 1 0 _aOperational Semantics and Verification of Security Protocols
_h[electronic resource] /
_cby Cas Cremers, Sjouke Mauw.
264 1 _aBerlin, Heidelberg :
_bSpringer Berlin Heidelberg :
_bImprint: Springer,
_c2012.
300 _aXIII, 172 p. 59 illus.
_bonline resource.
336 _atext
_btxt
_2rdacontent
337 _acomputer
_bc
_2rdamedia
338 _aonline resource
_bcr
_2rdacarrier
347 _atext file
_bPDF
_2rda
490 1 _aInformation Security and Cryptography,
_x1619-7100
505 0 _aIntroduction -- Preliminaries -- Operational Semantics -- Security Properties -- Verification -- Multiprotocol Attacks -- Generalizing NSL for Multiparty Authentication -- Related Work -- Conclusions and Future Work -- Index.
520 _aSecurity protocols are widely used to ensure secure communications over insecure networks, such as the internet or airwaves. These protocols use strong cryptography to prevent intruders from reading or modifying the messages. However, using cryptography is not enough to ensure their correctness. Combined with their typical small size, which suggests that one could easily assess their correctness, this often results in incorrectly designed protocols. The authors present a methodology for formally describing security protocols and their environment. This methodology includes a model for describing protocols, their execution model, and the intruder model. The models are extended with a number of well-defined security properties, which capture the notions of correct protocols, and secrecy of data. The methodology can be used to prove that protocols satisfy these properties. Based on the model they have developed a tool set called Scyther that can automatically find attacks on security protocols or prove their correctness. In case studies they show the application of the methodology as well as the effectiveness of the analysis tool. The methodology’s strong mathematical basis, the strong separation of concerns in the model, and the accompanying tool set make it ideally suited both for researchers and graduate students of information security or formal methods and for advanced professionals designing critical security protocols.
650 0 _aComputer science.
650 0 _aComputer network architectures.
650 0 _aSoftware engineering.
650 0 _aData structures (Computer science).
650 1 4 _aComputer Science.
650 2 4 _aData Structures, Cryptology and Information Theory.
650 2 4 _aComputer Systems Organization and Communication Networks.
650 2 4 _aSoftware Engineering/Programming and Operating Systems.
700 1 _aMauw, Sjouke.
_eauthor.
710 2 _aSpringerLink (Online service)
773 0 _tSpringer eBooks
776 0 8 _iPrinted edition:
_z9783540786351
830 0 _aInformation Security and Cryptography,
_x1619-7100
856 4 0 _uhttp://dx.doi.org/10.1007/978-3-540-78636-8
912 _aZDB-2-SCS
999 _c101796
_d101796