Abstract:SCTP is a transport protocol offering features such as multi-homing, multi-streaming, and message-oriented delivery. Its two main implementations were subjected to conformance tests using the PacketDrill tool. Conformance testing is not exhaustive and a recent vulnerability (CVE-2021-3772) showed SCTP is not immune to attacks. Changes addressing the vulnerability were implemented, but the question remains whether other flaws might persist in the protocol design. We study the security of the SCTP design, taking a rigorous approach rooted in formal methods. We create a formal Promela model of SCTP, and define 10 properties capturing the essential protocol functionality based on its RFC specification and consultation with the lead RFC author. Then we show using the Spin model checker that our model satisfies these properties. We define 4 attacker models - Off-Path, where the attacker is an outsider that can spoof the port and IP of a peer; Evil-Server, where the attacker is a malicious peer; Replay, where an attacker can capture and replay, but not modify, packets; and On-Path, where the attacker controls the channel between peers. We modify an attack synthesis tool designed for transport protocols, Korg, to support our SCTP model and four attacker models. We synthesize 14 unique attacks using the attacker models - including the CVE vulnerability in the Off-Path attacker model, 4 attacks in the Evil-Server attacker model, an opportunistic ABORT attack in the Replay attacker model, and eight connection manipulation attacks in the On-Path attacker model. We show that the proposed patch eliminates the vulnerability and does not introduce new ones according to our model and protocol properties. Finally, we identify and analyze an ambiguity in the RFC, which we show can be interpreted insecurely. We propose an erratum and show that it eliminates the ambiguity.

Protocol Security Testing with SPIN and TTCN-3

A TTCN-3-based Protocol Testing System and Its Extension.

Verification of A Security Adaptive Protocol Suite Using SPIN

Vulnerability Analysis of Clock Synchronization Protocol Using Stochastic Petri Net

Mutation Testing of Protocol Messages Based on Extended TTCN-3

Formal Verification of Authentication and Confidentiality for TACACS+ Security Protocol using Scyther

Advancing Security Protocol Verification: A Comparative Study of Scyther, Tamarin

Finding Security Vulnerabilities in Network Protocol Implementations

SIP Robustness Testing Based on TTCN-3

A Formal Analysis of SCTP: Attack Synthesis and Patch Verification

From Wireless Sensor Networks to Wireless Body Area Networks: Formal Modeling and Verification on Security Using PAT.

Model Checking Analysis of Needham-Schroeder Public-Key Protocol

Protocol vulnerability detection based on network traffic analysis and binary reverse engineering

Analysis on the Role of Network Security Protocol in Computer Communication Technology

An Automated Mechanism of Security Test on Network Protocols

Security Quantifying Method and Enhanced Mechanisms of TNC

Verification and Implementation of the Protocol Standard in Train Control System

Test Execution Method Based on TTCN's Operational Semantics

A model-guided symbolic execution approach for network protocol implementations and vulnerability detection

Security Analysis and Improvement of Vehicle Ethernet SOME/IP Protocol

Reachability Graph Based Hierarchical Test Generation for Network Protocols Modeled as Parallel Finite State Machines