Skip to main content

Multi-protocol Attacks

  • Chapter

Part of the book series: Information Security and Cryptography ((ISC))

Abstract

We introduce the notion of multi-protocol attacks. Using the tool presented in the previous chapter, we analyse a large number of protocols. From the results we obtain two common patterns that occur in multi-protocol attacks.

This is a preview of subscription content, log in via an institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   54.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   69.95
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info
Hardcover Book
USD   69.99
Price excludes VAT (USA)
  • Durable hardcover edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

References

  1. S. Andova, C.J.F. Cremers, K. Gjøsteen, S. Mauw, S.F. Mjølsnes, S. Radomirović, A framework for compositional verification of security protocols. Inf. Comput. 206(2–4), 425–459 (2008)

    Article  MATH  Google Scholar 

  2. D.A. Basin, C.J.F. Cremers, S. Meier, Provably repairing the ISO/IEC 9798 standard for entity authentication, in 1st International Conference on Principles of Security and Trust (POST’12), ed. by P. Degano, J.D. Guttman, Tallinn, Estonia. Lecture Notes in Computer Science, vol. 7215 (Springer, Berlin, 2012), pp. 129–148

    Google Scholar 

  3. C. Boyd, A. Mathuria, Protocols for Authentication and Key Establishment. Information Security and Cryptography (Springer, Berlin, 2003)

    Google Scholar 

  4. J.A. Clark, J.L. Jacob, A survey of authentication protocol literature: Version 1.0. Unpublished article (1997)

    Google Scholar 

  5. N.A. Durgin, P.D. Lincoln, J.C. Mitchell, A. Scedrov, Undecidability of bounded security protocols, in Formal Methods and Security Protocols (FMSP’99), Trento, Italy (1999)

    Google Scholar 

  6. J.D. Guttman, F.J. Thayer, Protocol independence through disjoint encryption, in 13th IEEE Computer Security Foundations Workshop (CSFW’00), Cambridge, UK (IEEE Computer Society, Los Alamitos, 2000), pp. 24–34

    Chapter  Google Scholar 

  7. J. Heather, G. Lowe, S. Schneider, How to prevent type flaw attacks on security protocols. J. Comput. Secur. 11(2), 217–244 (2003)

    Google Scholar 

  8. J. Kelsey, B. Schneier, D. Wagner, Protocol interactions and the chosen protocol attack, in 5th International Workshop on Security Protocols, ed. by B. Christianson, B. Crispo, T.M.A. Lomas, M. Roe, Paris, France. Lecture Notes in Computer Science, vol. 1361 (Springer, Berlin, 1997), pp. 91–104

    Chapter  Google Scholar 

  9. Y. Li, W. Yang, C. Huang, On preventing type flaw attacks on security protocols with a simplified tagging scheme. J. Inf. Sci. Eng. 21(1), 59–84 (2005)

    MathSciNet  Google Scholar 

  10. G. Lowe, Breaking and fixing the Needham-Schroeder public-key protocol using FDR, in 2nd International Conference on Tools and Algorithms for the Construction and Analysis of Systems (TACAS’96), ed. by T. Margaria, B. Steffen, Passau, Germany. Lecture Notes in Computer Science, vol. 1055 (Springer, Berlin, 1996), pp. 147–166

    Chapter  Google Scholar 

  11. G. Lowe, Towards a completeness result for model checking of security protocols, in 11th IEEE Computer Security Foundations Workshop (CSFW’98), Rockport, USA (IEEE Computer Society, Los Alamitos, 1998), pp. 96–105

    Google Scholar 

  12. Security Protocols Open Repository (SPORE). http://www.lsv.ens-cachan.fr/spore (accessed 18 Sept 2012)

  13. F.L. Tiplea, C. Enea, C.V. Birjoveneanu, Decidability and complexity results for security protocols, in Verification of Infinite-State Systems with Applications to Security (VISSAS’05), ed. by E.M. Clarke, M. Minea, F.L. Tiplea, Timisoara, Romania. NATO Security Through Science Series D: Information and Communication Security, vol. 1 (IOS Press, Lansdale, 2006), pp. 185–211

    Google Scholar 

  14. T. Woo, S. Lam, A lesson on authentication protocol design. Oper. Syst. Rev. 28(3), 24–37 (1994)

    Article  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Rights and permissions

Reprints and permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this chapter

Cite this chapter

Cremers, C., Mauw, S. (2012). Multi-protocol Attacks. In: Operational Semantics and Verification of Security Protocols. Information Security and Cryptography. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-78636-8_6

Download citation

  • DOI: https://doi.org/10.1007/978-3-540-78636-8_6

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-78635-1

  • Online ISBN: 978-3-540-78636-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics