On the secure implementation of security protocols |
| |
Authors: | Pablo Giambiagi Mads Dam |
| |
Affiliation: | Swedish Institute of Computer Science, Box 1263, S-164 49, Kista, Sweden |
| |
Abstract: | We consider the problem of implementing a security protocol in such a manner that secrecy of sensitive data is not jeopardized. Implementation is assumed to take place in the context of an API that provides standard cryptography and communication services. Given a dependency specification, stating how API methods can produce and consume secret information, we propose an information flow property based on the idea of invariance under perturbation, relating observable changes in output to corresponding changes in input. Besides the information flow condition itself, the main contributions of the paper are results relating the admissibility property to a direct flow property in the special case of programs which branch on secrets only in cases permitted by the dependency rules. These results are used to derive an unwinding theorem, reducing a behavioural correctness check (strong bisimulation) to an invariant. |
| |
Keywords: | Author Keywords: Semantics-based security Confidentiality Information flow Protocol implementation Admissibility Security policy |
本文献已被 ScienceDirect 等数据库收录! |
|