Abstract:In the dynamic field of Internet security, verifying and analyzing security protocols is crucial for ensuring secure and effective communication. This paper presents an analysis of leading tools used for the verification, falsification, and analysis of security protocols, focusing particularly on Scyther and Tamarin. We examine the methodologies, capabilities, and applications of these tools in various contexts, including cloud computing and IoT, highlighting their unique approaches and contributions to the field. The paper starts with an examination of the Scyther tool, emphasizing its innovative approach to automated falsification and verification, and its application in multi-protocol analysis. We then transition to exploring the use of Scyther in verifying key agreement protocols in cloud computing. A comparative analysis of Scyther and Tamarin is also presented, shedding light on their effectiveness in identifying security properties and revealing the strengths and weaknesses of different protocols. This is further enriched by a detailed look at the unbounded verification capabilities of Scyther. Additionally, the paper covers the capabilities of the Tamarin prover, exploring its advanced features in symbolic analysis, its ability to handle complex security properties, and its application in verifying protocol implementations. Through this paper, we aim to provide a comprehensive overview of the current landscape in security protocol verification, offering insights into the methodologies, challenges, and future directions in this essential area of research.

SPVT: An Efficient Verification Tool for Security Protocol

Protocol Security Testing with SPIN and TTCN-3

From Wireless Sensor Networks to Wireless Body Area Networks: Formal Modeling and Verification on Security Using PAT.

Verification of A Security Adaptive Protocol Suite Using SPIN

User-Guided Verification of Security Protocols via Sound Animation

Advancing Security Protocol Verification: A Comparative Study of Scyther, Tamarin

Sound Verification of Security Protocols: From Design to Interoperable Implementations (extended version)

Formal Analysis and Verification of Security Propertiesof Security Protocols in ProVerif

Model Checking Needham-Schroeder Security Protocol Based on Temporal Logic of Knowledge

Verification and improvement of SET payment protocols under instantiation space logic

A New Security Protocol Modeling Approach Based on Π T Calculus

The Security Protocol Verifier ProVerif and its Horn Clause Resolution Algorithm

Model Checking Analysis of Needham-Schroeder Public-Key Protocol

Automated verification of dynamic root of trust protocols (long version)

A Generic Methodology for the Modular Verification of Security Protocol Implementations (extended version)

DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice

Practical and Scalable Security Verification of Secure Architectures

A Formal Specification and Verification Framework for Timed Security Protocols.

Formal Verification of Authentication and Confidentiality for TACACS+ Security Protocol using Scyther

VST-A: A Foundationally Sound Annotation Verifier

OSVAuto: semi-automatic verifier for functional specifications of operating systems