- ホーム
- > 洋書
- > 英文書
- > Computer / General
Full Description
Security protocols are one of the most critical elements in enabling the secure communication and processing of information, ensuring its confidentiality, integrity, authenticity and availability. These protocols are vulnerable to a host of subtle attacks, so designing protocols to be impervious to such attacks has proved to be extremely challenging and error prone. This book provides a thorough and detailed understanding of one of the most effective approaches to the design and evaluation of security critical systems, describing the role of security protocols in distributed secure systems and the vulnerabilities to which they are prey. The authors introduce security protocols, the role they play and the cryptographic mechanisms they employ, and detail their role in security architectures, e-commerce, e-cash etc. Precise characterizations of key concepts in information security, such as confidentiality, authentication and integrity are introduced and a range of tools and techniques are described which will ensure that a protocol guarantees certain security services under appropriate assumptions. Modeling and Analysis of Security Protocols provides: An in-depth discussion of the nature and role of security protocols and their vulnerabilities.A rigorous framework in which security protocols and properties can be defined in detail.An understanding of the tools and techniques used to design and evaluate security protocols.
Contents
Table of Contents0. Introduction. Security protocols. Security properties. Cryptography. Public-key certificates and infrastructures. Encryption modes. Cryptographic hash functions. Digital signatures. Security protocol vulnerabilities. The CSP approach. Casper: the user-friendly interface of FDR. Limits of formal analysis. Summary. 1. An introduction to CSP. Basic building blocks. Parallel operators. Hiding and renaming. Further operators. Process behaviour. Discrete time. 2. Modelling security protocols in CSP. Trustworthy processes. Data types for protocol models. Modelling an intruder. Putting the network together. 3. Expressing protocol goals. The Yahalom protocol. Secrecy. Authentication. Non-repudiation. Anonymity. Summary. 4. Overview of FDR. Comparing processes. Labelled Transition Systems. Exploiting compositional structure. Counterexamples. 5. Casper. An example input file. The %-notation. Case study: the Wide-Mouthed-Frog protocol. Protocol specifications. Hash functions and Vernam encryption. Summary. 6. Encoding protocols and intruders for FDR. CSP from Casper. Modelling the intruder: the perfect spy. Wiring the network together. Example deduction system. Algebraic equivalences. Specifying desired properties. 7. Theorem proving. Rank functions. Secrecy of the shared key: a rank function. Secrecy on nB. Authentication. Machine assistance. Summary. 8. Simplifying transformations. Simplifying transformations for protocols. Transformations on protocols. Examples of safe simplifying transformations. Structural transformations. Case study: The CyberCash Main Sequence protocol. Summary. 9. Other approaches. Introduction. The Dolev-Yao model. BAN logic and derivatives. FDM and InaJo. NRL Analyser. The B-method approach. The non-interference approach. Strand spaces. The inductive approach. Spi calculus. Provable security. 10. Prospects and wider issues. Introduction. Abstraction of cryptographic primitives. The refinement problem. Combining formal and cryptographic styles of analysis. Dependence on infrastructure assumptions. Conference and group keying. Quantum cryptography. Data independence. Appendix A. Background cryptography. The RSA algorithm. The ElGamal public key system. Complexity theory. Appendix B. The Yahalom protocol in Casper. The Casper input file. Casper output. Appendix C. CyberCash rank function analysis. Secrecy. Authentication. Bibliography. Notation. Index.
