2014/05/27 by Michele Peroli, Luca Viganò, Peroli, Michele +3
Computer Science · #Advanced Authentication Protocols Security #Cryptography and Data Security #Cryptography and Security (cs.CR) #Distributed systems and fault tolerance #FOS: Computer and information sciences #Network Security and Intrusion Detection #User Authentication and Security Systems #cs.CR #semigroups and automata theory
paper · pdf · doi:10.48550/arxiv.1405.6912
29 pages
arxiv created 2014/05/27 · openalex publication_date 2014/05/27 · arxiv updated 2014/05/28 · openalex created_date 2022/10/03 · openalex updated_date 2026/07/28
Security protocols are often found to be flawed after their deployment. We present an approach that aims at the neutralization or mitigation of the attacks to flawed protocols: it avoids the complete dismissal of the interested protocol and allows honest agents to continue to use it until a corrected version is released. Our approach is based on the knowledge of the network topology, which we model as a graph, and on the consequent possibility of creating an interference to an ongoing attack of a Dolev-Yao attacker, by means of non-collaboration actuated by ad-hoc benign attackers that play the role of network guardians. Such guardians, positioned in strategical points of the network, have the task of monitoring the messages in transit and discovering at runtime, through particular types of inference, whether an attack is ongoing, interrupting the run of the protocol in the positive case. We study not only how but also where we can attempt to defend flawed security protocols: we investigate the different network topologies that make security protocol defense feasible and illustrate our approach by means of concrete examples.