| 摘要: |
| Buttyan等人提出了一个简洁的逻辑,他们把它用于改进Woo-Lam协议,并且未证明地声称:改进后的协议是抗协议与自身的交互攻击的.为表明他们的结论是不正确的,找到了改进协议的两个不同的攻击,并详细解释如何加以实现.构造攻击的方式除了要求更细致之外,与Debbabi等人的方式在本质上是相似的.进一步的分析表明Debbabi等人的逻辑没有足够的能力推理交互攻击,该逻辑有待改进. |
| 关键词: 协议 交互攻击 安全性 模态逻辑,分析 |
| DOI： |
| 分类号: |
| 基金项目:Supported by the National Grant Foundamental Research 973 Program of China under Grant No.G1999035802 (国家重点基础研究973发展规划); the National Outstanding Youth Foundation of China under Grant No.60025205 (国家杰出青年基金) |
|
| Noteson‘A SimpleLogicfor Authentication Protocol Design' |
|
JI Qing guang,FENG Deng guo
|
| Abstract: |
| Buttyan et al. proposed a simple logic and used it to revise Woo Lam protocol; without proving, they claimed that revised protocol is resistant against the interaction attacks between a protocol and itself. In this paper, in order to show that their results are incorrect, two different attacks on revised protocol are found out and set out in detail for their implementations. The fashions to construct the two attacks are essentially analogous to the ones described by Debbabi etc. except more complicated than them,The further analysis show that the logic of Buttyan etc.has no enough capacity to sufficiently capture protocol flaws,which stem from interaction of protocol itself.This logic needs to be improved. |
| Key words: protocol interaction attack security modal logic analysis |
