An IDE for the Design, Verification and Implementation of Security Protocols
Autor: | Paolo Modesti, Remi Garcia |
---|---|
Jazyk: | angličtina |
Rok vydání: | 2017 |
Předmět: |
Model checking
Protocol (science) Cybersecurity business.industry Programming language Computer science 05 social sciences 050301 education 0102 computer and information sciences Cryptographic protocol Formal methods Encryption computer.software_genre 01 natural sciences sub_softwareengineering 010201 computation theory & mathematics top_computing Code generation Compiler business Software engineering 0503 education computer Formal verification |
Zdroj: | The 28th International Symposium on Software Reliability Engineering Workshops (ISSREW) ISSRE Workshops |
Popis: | Security protocols are critical components for the construction of secure and dependable distributed applications, but their implementation is challenging and error prone. Therefore, tools for formal modelling and analysis of security protocols can be potentially very useful to support software engineers. However, despite such tools having been available for a long time, their adoption outside the research community has been very limited. In fact, most practitioners find such applications too complex and hardly usable for their daily work. In this paper, we present an Integrated Development Environment for the design, verification and implementation of security protocols, aimed at lowering the adoption barrier of formal methods tools for security. In the spirit of Model Driven Development, the environment supports the user in the specification of the model using the simple and intuitive language AnB (and its extension AnBx). Moreover, it provides a push-button solution for the formal verification of the abstract and concrete models, and for the automatic generation of Java implementation. This Eclipse-based IDE leverages on existing languages and tools for the modelling and verification of security protocols, such as the AnBx Compiler and Code Generator, the model checker OFMC and the cryptographic protocol verifier ProVerif. |
Databáze: | OpenAIRE |
Externí odkaz: |