A Formal Specification for RIP Protocol

Dan Pei,Dan Massey,Lixia Zhang
2008-01-01
Abstract:A protocol standard is often intended to allow multiple implementations to inter-operate, and multiple im- plementation choices and many engineering details usually make a formal protocol specification difficult. Lack of formal protocol specification has two important results, as has been shown in the IETF standard development process: the correctness of the protocol is not easy to be proven; the protocol may be ambiguous in some aspects, leaving rooms for implementation bugs and even for attacks. Even worse, the bugs and ambiguities are identi- fied in an ad hoc way, and there has not been any systematic way to identify bugs and ambiguities in existing protocols. In this work, we present a formal specification for the Routing Information Protocol(RIP). In Section 2, we will give a formal specification of the minimal requirements for a RIP router in order to guarantee that RIP will converge after a network topology change. By analyzing the RIP standards, we only specify those requirements that must be satisfied, while leaving room for any implementation choices allowed. Then in Section 3, we will present another formal specification of RIP by Finite State Machine. Using FSMs, we are able to find two ambiguities in the RIP standard.
What problem does this paper attempt to address?