CSDL Home IEEE Transactions on Dependable and Secure Computing 2007 vol.4 Issue No.03 - July-September
One Picture Is Worth a Dozen Connectives: A Fault-Tree Representation of NPATRL Security Requirements
Issue No.03 - July-September (2007 vol.4)
In this paper we show how we can increase the ease of reading and writing security requirements for cryptographic protocols at the Dolev-Yao level of abstraction by developing a visual language based on fault trees. We develop such a semantics for a subset of NPATRL, a temporal language used for expressing safety requirements for cryptographic protocols, and show that the subset is sound and complete with respect to the semantics. We also show how the fault trees can be used to improve the presentation of some specifications that we developed in our analysis of the Group Domain of Interpretation (GDOI) protocol. Other examples involve a property of Kerberos 5, and a visual account of the requirements in Lowe's authentication hierarchy.
C.2.0.f Network-level security and protection, C.2.2.c Protocol verification, F.4.3 Formal Languages
Iliano Cervesato, Catherine Meadows, "One Picture Is Worth a Dozen Connectives: A Fault-Tree Representation of NPATRL Security Requirements", IEEE Transactions on Dependable and Secure Computing, vol.4, no. 3, pp. 216-227, July-September 2007, doi:10.1109/TDSC.2007.70206