arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 1106.3746cs.CR
收藏

安全协议分析的非协作场景中的攻击干扰[扩展版]

Attack Interference in Non-Collaborative Scenarios for Security Protocol Analysis [Extended Version]

M. Camilla Fiazza, Michele Peroli, Luca Viganò

摘要:

在安全协议分析中,考虑单个Dolev-Yao攻击者的传统选择得到了以下事实的支持:具有多个协作Dolev-Yao攻击者的模型已被证明可以简化为具有一个Dolev-Yao攻击者的模型。在本文中,我们采取了一种完全不同的方法,并调查了多个非合作攻击者的情况。在形式化的框架多攻击者的情况下,我们展示了一个案例研究,并发的竞争性攻击可以相互干扰。然后,我们提出了一种新的策略来保护安全协议,基于主动开发的攻击干扰。该论文可以被视为提供了两个概念验证结果:(i)可以利用干扰来减轻协议漏洞,从而为协议提供一种保护形式;(ii)搜索防御策略需要至少有两个攻击者的场景。

英文摘要:

In security protocol analysis, the traditional choice to consider a single Dolev-Yao attacker is supported by the fact that models with multiple collaborating Dolev-Yao attackers have been shown to be reducible to models with one Dolev-Yao attacker. In this paper, we take a fundamentally different approach and investigate the case of multiple non-collaborating attackers. After formalizing the framework for multi-attacker scenarios, we show with a case study that concurrent competitive attacks can interfere with each other. We then present a new strategy to defend security protocols, based on active exploitation of attack interference. The paper can be seen as providing two proof-of-concept results: (i) it is possible to exploit interference to mitigate protocol vulnerabilities, thus providing a form of protection to protocols; (ii) the search for defense strategies requires scenarios with at least two attackers.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑