loading
Papers

Research.Publish.Connect.

Paper

Paper Unlock

Authors: Llanos Tobarra ; Diego Cazorla ; J. José Pardo and Fernando Cuartero

Affiliation: Escuela Politécnica Superior de Albacete, Universidad de Castilla-La Mancha, Spain

ISBN: 978-989-8111-38-8

Keyword(s): Security protocols, model checking, Casper/FDR2.

Related Ontology Subjects/Areas/Topics: Enterprise Information Systems ; Formal Methods ; Information Systems Analysis and Specification ; Methodologies and Technologies ; Modeling Formalisms, Languages and Notations ; Operational Research ; Security ; Simulation and Modeling

Abstract: Secure Sockets Layer (SSL) has become one of the most popular security protocols in the Internet. In this paper we present a formal verification of this protocol using the Casper/FDR2 toolbox. In the analysis of SSL v3.0 Handshake we have used a methodology that considers incremental versions of the protocol. We have started with the most basic protocol, and then we have included other features such as server and client authentication, digital signatures, etc. We have also verified SSL v2.0 because of the so called version rollback attack. Each version has been modelled and verified, and the results have been interpreted. Using this methodology it is easy to understand why some messages are needed in order to ensure confidential communication between a client and a server.

PDF ImageFull Text

Download
CC BY-NC-ND 4.0

Sign In Guest: Register as new SciTePress user now for free.

Sign In SciTePress user: please login.

PDF ImageMy Papers

You are not signed in, therefore limits apply to your IP address 3.214.184.250

In the current month:
Recent papers: 100 available of 100 total
2+ years older papers: 200 available of 200 total

Paper citation in several formats:
Tobarra L.; Cazorla D.; José Pardo J.; Cuartero F. and (2008). FORMAL VERIFICATION OF THE SECURE SOCKETS LAYER PROTOCOL.In Proceedings of the Tenth International Conference on Enterprise Information Systems - Volume 2: ICEIS, ISBN 978-989-8111-38-8, pages 246-252. DOI: 10.5220/0001695202460252

@conference{iceis08,
author={Llanos Tobarra and Diego Cazorla and J. {José Pardo} and Fernando Cuartero},
title={FORMAL VERIFICATION OF THE SECURE SOCKETS LAYER PROTOCOL},
booktitle={Proceedings of the Tenth International Conference on Enterprise Information Systems - Volume 2: ICEIS,},
year={2008},
pages={246-252},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0001695202460252},
isbn={978-989-8111-38-8},
}

TY - CONF

JO - Proceedings of the Tenth International Conference on Enterprise Information Systems - Volume 2: ICEIS,
TI - FORMAL VERIFICATION OF THE SECURE SOCKETS LAYER PROTOCOL
SN - 978-989-8111-38-8
AU - Tobarra, L.
AU - Cazorla, D.
AU - José Pardo, J.
AU - Cuartero, F.
PY - 2008
SP - 246
EP - 252
DO - 10.5220/0001695202460252

Login or register to post comments.

Comments on this Paper: Be the first to review this paper.