• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2010, Vol. 32 ›› Issue (4): 25-28.doi: 10.3969/j.issn.1007130X.2010.

• 论文 • 上一篇    下一篇

802.11i双向认证协议的模型检查

黄谷,缪力,张大方   

  1. (湖南大学软件学院,湖南 长沙 410082)
  • 收稿日期:2009-01-05 修回日期:2009-04-09 出版日期:2010-03-28 发布日期:2010-03-28
  • 通讯作者: 黄谷 E-mail:huangmiao_924@163.com
  • 作者简介:黄谷(1984-),女,湖南华容人,硕士生,研究方向为软件测试与软件可靠性分析;缪力,博士,研究方向为软件测试和软件工程等;张大方,博士,教授,博士生导师,研究方向为可信系统与网络、软件测试等。

Formal Verification of the 802.11i Authentication Protocols by Model Checking

HUANG Gu,MIAO Li, ZHANG Da fang   

  1. (School of Software,Hunan University,Changsha 410082,China)
  • Received:2009-01-05 Revised:2009-04-09 Online:2010-03-28 Published:2010-03-28
  • Contact: HUANG Gu E-mail:huangmiao_924@163.com

摘要: 确保安全协议的正确性对于保证Internet上安全敏感的业务非常重要。采用形式化方法建模和验证安全协议可以检测到传统测试手段难以发现的错误。模型检查作为形式化验证方法的一种,有着自动化和提供反例等诸多优点。使用模型检查工具SPIN对802.11i双向认证协议EAPTLS进行验证,提取出包含协议设计重要细节的形式化模型,对协议安全属性采用线性时态逻辑抽象,并验证协议模型是否满足安全属性。提出了一种使用PROMELA建模认证协议的方法。

关键词: 模型检查, 协议验证, 认证协议, SPIN, EAPTLS

Abstract: It is important to guarantee the correctness of security protocols to ensure the securitysensitive businesses on the Internet. The formal method is useful to analyze and verify security protocols. It can uncover bugs which are difficult to find by testing. As a formalized method, model checking has many advantages. It is fully automatic, and also can provide faulty traces. An approach to abstracting and modeling the EAPTLS of 802.11i is presented by using model checker SPIN,and a formalized model of at a significant level of detail is extracted.The security properties of the protocol for verification are extracted using LTL to find if the security properties are true in the model. A way to model authentication protocols using PROMELA is presented.

Key words: model checking;protocol verification;authentication protocol;SPIN;EAPTLS

中图分类号: