Abstract:Protocol security testing is an important technique to ensure the security of communication protocols. However, methods considering both effective detection to specification vulnerabilities and efficient testing on protocol implementations are not well developed. In this paper, we present a general method for protocol security testing including protocol verification with SPIN model checker and protocol testing with formal testing language TTCN-3. We use threat model to model malicious entities and import the classification of information security to achieve a complete analysis of security requirements for protocol verification. We also develop a SPIN Trail to TTCN-3(st2ttcn) conversion tool to generate test cases automatically from counter examples obtained from model checking. As a case study, we apply our approach to the security testing of Source Address Validation Improvements (SAVI) protocol. We test two versions of SAVI-DHCP protocol. Security vulnerabilities have been found and tested in corresponding implementations.

A TTCN-3-based Protocol Testing System and Its Extension.

IntegTTCN, a TTCN language extension for protocol integrated testing

Mutation Testing of Protocol Messages Based on Extended TTCN-3

Internet protocol conformance testing by using a TTCN based protocol integrated test system

Protocol Security Testing with SPIN and TTCN-3

A Formal Approach to Conformance Testing of Internet Routing Protocols

SIP Robustness Testing Based on TTCN-3

Ttcn-3 Based Robustness Test Generation and Automation

Using Timed TTCN-3 in Interoperability Testing for Real-Time Communication Systems

An Extension to Concurrent TTCN

A Formal Approach to Protocol Performance Testing.

SIP Conformance Testing Based on TTCN-2

A Concurrent TTCN Based Approach to Conformance Testing of Distributed Routing Protocol OSPF V2.

Test of BGP-4 Based on Protocol Integrated Testing System

LDP Conformance Testing Based on TTCN-3

Application of a TTCN-based conformance test environment to the Internet email protocol

Testing Time Constraints in Network Protocols

Test Execution Method Based on TTCN's Operational Semantics

Generality Design for Testing OSI and Internet Protocols

An approach to TTCN-based test execution

A Formal Approach to Protocol Interoperability Testing