Abstract:This paper proposes an, automatic attack construction algorithm in order to find potential attacks on security protocols. It is based on a dynamic strand space model, which enhances the original strand space model by introducing active nodes on strands so as to characterize the dynamic procedure of protocol execution. With exact causal dependency relations between messages considered in the model, this algorithm can avoid state space explosion caused by asynchronous composition. In order to get a finite state space, a new method called strand-added on demand is exploited, which extends a bundle in an incremental manner without requiring explicit configuration of protocol execution parameters. A finer granularity model of term structure is also introduced, in which subterms are divided into check subterms and data subterms. Moreover, data subterms can be further classified based on the compatible data subterm relation to obtain automatically the finite set of valid acceptable terms for an honest principal. In this algorithm, terms core is designed to represent the intruder’s knowledge compactly, and forward search technology is used to simulate attack patterns easily. Using this algorithm, a new attack on the Dolve-Yao protocol can be found, which is even more harmful because the secret is revealed before the session terminates.

Security analysis of Kerberos protocol based on the strand space model

Security analySiS of KerberoS protocol baSed on SPEAR Ⅱ

The Strand Space Model of NSSK Protocol and Its Analysis

Study on the Proof Method of Authentication Protocols Based on Strand Space

Formal Analysis of 3GPP Authentication and Key Agreement Based on the Strand Space Model

Cryptanalysis and Improvement of Park Et Al.'s Remote User Authentication Protocol

An Efficient Delegation-Based Anonymous Authentication Protocol

Formal verification of Kao Chow cryptographic protocol based on strand space model

Security Analysis of Needham-Schroeder Symmetric Key Authentication Protocol

An Enhanced Kerberos Protocol with Non-Interactive Zero-Knowledge Proof

Security Analysis of an Authentication and Key Agreement Protocol for Satellite Communications

Analysis and Design of an Authentication Protocol for Space Information Network

Application of strand space theory to formalization analyses of network protocol

Password-based Authentication and Key Distribution Protocols with Perfect Forward Secrecy

An Attack—Finding Algorithm for Security Protocols

Application of Checking Model in Security Protocol Analysis

On the Security of Some Password Authentication Protocols.

Analysis and Improvement of a Password-Based Authenticated Key Exchange Protocol

Security Analysis on an Improvement of RSA-Based Password Authenticated Key Exchange.

An enhanced Kerberos protocol based on one-time password

Security Analysis on S-3PAKE Protocol