论文标题
DEEPSEC：确定安全协议的等价属性 - 改进的理论和实践
DeepSec: Deciding Equivalence Properties for Security Protocols -- Improved theory and practice
论文作者
论文摘要
自动验证已成为加密协议安全评估的重要组成部分。在这种情况下，隐私类型的属性通常以无法区分性的语句建模，以过程计算中的行为等价表示。在本文中，我们既是为此验证问题的理论和实践做出的贡献。我们为静态等效性，痕量等价和标记的二比度建立了新的复杂性结果，并在协议数量数量的情况下为这些等价提供了决策程序。我们的程序是第一个针对各种加密原始图的痕量等效性和标记为二比标记的方法 - 那些可以用亚赛事收敛驱动器重写系统表示的。我们还在新工具DeepSec中实施了该过程。我们通过广泛的实验表明，它比其他类似工具更有效，同时提高了可以分析的协议范围。
Automated verification has become an essential part in the security evaluation of cryptographic protocols. In this context privacy-type properties are often modelled by indistinguishability statements, expressed as behavioural equivalences in a process calculus. In this paper we contribute both to the theory and practice of this verification problem. We establish new complexity results for static equivalence, trace equivalence and labelled bisimilarity and provide a decision procedure for these equivalences in the case of a bounded number of protocol sessions. Our procedure is the first to decide trace equivalence and labelled bisimilarity exactly for a large variety of cryptographic primitives -- those that can be represented by a subterm convergent destructor rewrite system. We also implemented the procedure in a new tool, DeepSec. We showed through extensive experiments that it is significantly more efficient than other similar tools, while at the same time raises the scope of the protocols that can be analysed.
