Abstract:In the current era, the ownership of strategic information and the ability to effectively manage it has become a significant advantage. Reflecting on the experience of attacks on strategic communications in Indonesia, including the tapping of the former President Susilo Bambang Yudhoyono's conversation through the cellular network and President Jokowi's official residence, Indonesia has begun paying more attention to security in this sector. Device X is one of the secret strategic communication tools used in Indonesia. The XYZ Agency initiated the use of this device. As of 2020, there have been 1,284 units of Device X widely used by the army, police officers, and other strategic agencies in Indonesia. In its 5 years of operation, the XYZ Agency has researched the algorithm security used in Device X. However, there has never been a study of thwe security regarding the authentication and communication protocols of this device. This research aims to make a security analysis of voice communication and authentication protocols of Device X. The research was implemented using Scyther Tool as a formal verification approach. The analysis focuses on guaranteeing the confidentiality of information and authentication with four criteria, namely, secrecy, aliveness, synchronization, and agreement. The experimental results demonstrate that the authentication and voice communication protocol of Device X satisfy the secrecy criteria for transmitted confidential information but does not satisfy the criteria of aliveness, synchronization, and agreement on several entities involved in the protocol. Thus, it can be claimed that the authentication and voice communication protocol of Device X is provably secure based on the confidentiality aspect of information but is not secure in terms of authentication.

Verificação Automática de Protocolos de Segurança com a ferramenta Scyther

Advancing Security Protocol Verification: A Comparative Study of Scyther, Tamarin

Automatic Protocol Reverse Engineering for Industrial Control Systems with Dynamic Taint Analysis

Formal Verification of Authentication and Confidentiality for TACACS+ Security Protocol using Scyther

Automation of System Security Vulnerabilities Detection Using Open-Source Software

Sound Verification of Security Protocols: From Design to Interoperable Implementations (extended version)

Finding Security Vulnerabilities in Network Protocol Implementations

Formal Verification of the Authentication and Voice Communication Protocol Security on Device X Using Scyther Tool

Photon counting statistics using a digital oscilloscope

Verifying Software Vulnerabilities in IoT Cryptographic Protocols

Finding Security Vulnerabilities in IoT Cryptographic Protocol and Concurrent Implementations

Vulnerability Detection in Intelligent Environments Authenticated by the OAuth 2.0 Protocol over HTTP/HTTPS

Towards a Data Centric Approach for the Design and Verification of Cryptographic Protocols

Trust, but Verify: Evaluating Developer Behavior in Mitigating Security Vulnerabilities in Open-Source Software Projects

Degrees of Security: Protocol Guarantees in the Face of Compromising Adversaries

Escuta telefônica VoiP INTERCEPTAÇÃO E ESCUTA DO FLUXO VoIP UTILIZANDO WIRESHARK INTERCEPTION AND LISTENING OF THE VOIP FLOW USING WIRESHARK

Verification of A Security Adaptive Protocol Suite Using SPIN

Software-based Security Framework for Edge and Mobile IoT

Sifu - a cybersecurity awareness platform with challenge assessment and intelligent coach

User-Guided Verification of Security Protocols via Sound Animation

Protocols to Code: Formal Verification of a Next-Generation Internet Router