International Symposium on Trustworthy Global Computing

TGC 2014: Trustworthy Global Computing pp 82-96

Tests for Establishing Security Properties

Conference paper

DOI: 10.1007/978-3-662-45917-1_6

Part of the Lecture Notes in Computer Science book series (LNCS, volume 8902)
Cite this paper as:
Cheval V., Delaune S., Ryan M. (2014) Tests for Establishing Security Properties. In: Maffei M., Tuosto E. (eds) Trustworthy Global Computing. TGC 2014. Lecture Notes in Computer Science, vol 8902. Springer, Berlin, Heidelberg


Ensuring strong security properties in some cases requires participants to carry out tests during the execution of a protocol. A classical example is electronic voting: participants are required to verify the presence of their ballots on a bulletin board, and to verify the computation of the election outcome. The notion of certificate transparency is another example, in which participants in the protocol are required to perform tests to verify the integrity of a certificate log.

We present a framework for modelling systems with such ‘testable properties’, using the applied pi calculus. We model the tests that are made by participants in order to obtain the security properties. Underlying our work is an attacker model called “malicious but cautious”, which lies in between the Dolev-Yao model and the “honest but curious” model. The malicious-but-cautious model is appropriate for cloud computing providers that are potentially malicious but are assumed to be cautious about launching attacks that might cause user tests to fail.


Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2014

Authors and Affiliations

  • Vincent Cheval
    • 1
    • 2
  • Stéphanie Delaune
    • 3
  • Mark Ryan
    • 1
  1. 1.LORIACNRS and Inria Nancy - Grand EstParisFrance
  2. 2.School of Computer ScienceUniversity of BirminghamBirminghamUK
  3. 3.LSVCNRS and ENS CachanParisFrance

Personalised recommendations