Security protocol analyzer

1
Security protocol analyzer

• Janus - security protocols analyzer using
  extensions of SPi-calculus
• By S. Seleznev and A. Mikhaylov

2
Why analysis of protocol models is important

• Protocol model is a core of distributed system
• If protocol is unsafe system became insecure
• Protocol can be considered safe only after
  analysis of protocol model

3
Tools for analysis

• STA small uses common syntax for represent
  protocol model command-line interface
  cross-platform
• AVISPA huge tool uses original notation
  examples library Linux and MacOS only.

4
Analysis methods

• Enumerative reasoning takes a lot of time and/or
  system resources to conclude that protocol is
  secure no additional information should be added
  to protocol model.
• Other methods (Type checking, for example) works
  very fast some information should be added to
  the protocol model sometimes secure model can be
  wrongly considered as insecure

5
Janus Tool
6
Analyzing protocol using Janus
7
Thanks for your attention!