基于串空间模型的多协议猜测攻击验证分析

对安全协议进行猜测攻击,如果攻击者不能正确猜测用户秘密,那么他就会设法使用其他的信息来验证这种猜测.过去仅考虑了协议在独立执行的时候所遭受到的攻击.现引入一种新类型攻击称为多协议猜测攻击,它可以存在于混合协议中.接着,采用程序化分析方法对协议可能遭受到的猜测攻击进行了分析即协议的脆弱性分析.最后,加入一定的限制条件并使用串空间建模,进而保证了协议的安全性即协议的健壮性验证.

ANALYSIS AND VERIFICATION ON MULTI-PROTOCOL GUESSING ATTACKS BASED ON STRAND SPACE MODEL

A guessing attack on a security protocol is an attack where an attacker guesses a chosen user's secret and if failed then seeks to verify that guess by using other information.Past efforts were only made to attacks in terms of protocols executed in isolation.In this paper it introduced new types of attacks called multi-protocol guessing attacks,which can exist when protocols are mixed.Then a systematic procedure analysis was used to analyze protocols subject to guessing attacks-Vulnerability of protocols.La...