DocumentCode
2241564
Title
An executable specification language for planning attacks to security protocols
Author
Aiello, Luigia Carlucci ; Massacci, Fabio
Author_Institution
Dipt. di Inf. e Sistemistica, Rome Univ., Italy
fYear
2000
fDate
2000
Firstpage
88
Lastpage
102
Abstract
We propose ALSP a Declarative Executable Specification Language for Planning Attacks to Security Protocols based on logic programming. In ALSP we can give a declarative specification of a protocol with the natural semantics of send and receive actions. We view a protocol trace as a plan to reach a goal, so that attacks are just plans reaching goals that correspond to security violations, which can be also declaratively specified. Building on results from logic programming and planning, we map the existence of an attack to a protocol into the existence of a model for the protocol specification that satisfies the specification of an attack. ALSP specifications are executable, as we can automatically search for attacks via any efficient model generator (such as smodels), that implements the stable model semantics of normal logic programs. Thus, we come to a specification language which is easy to use (protocol specifications are expressed at a high level of abstraction, and with an intuitive notation close to their traditional description) still keeping the rigor of a formal specification that, in addition, is executable
Keywords
cryptography; formal specification; formal verification; logic programming; protocols; security of data; specification languages; ALSP; Declarative Executable Specification Language; executable specification language; formal specification; high level of abstraction; logic programming; model checking; model generator; natural semantics; planning attacks; protocol specification; protocol trace; receive actions; security protocols; security violations; smodels; stable model semantics; Automatic logic units; Body sensor networks; Books; Electrical capacitance tomography; Formal specifications; Protocols; Remuneration; Security; Specification languages;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Security Foundations Workshop, 2000. CSFW-13. Proceedings. 13th IEEE
Conference_Location
Cambridge
ISSN
1063-6900
Print_ISBN
0-7695-0671-2
Type
conf
DOI
10.1109/CSFW.2000.856928
Filename
856928
Link To Document