Hier finden Sie wissenschaftliche Publikationen aus den Fraunhofer-Instituten.

A sound decision procedure for the compositionality of secrecy

: Ochoa, M.; Jürjens, J.; Warzecha, D.


Barthe, G.:
Engineering secure software and systems. 4th international symposium, ESSoS 2012 : Eindhoven, The Netherlands, February, 16 - 17, 2012; proceedings
Berlin: Springer, 2012 (Lecture Notes in Computer Science 7159)
ISBN: 978-3-642-28165-5
ISBN: 3-642-28165-6
ISSN: 0302-9743
International Symposium on Engineering Secure Software and Systems (ESSoS) <4, 2012, Eindhoven>
Fraunhofer ISST ()

The composition of processes is in general not secrecy preserving under the Dolev-Yao attacker model. In this paper, we describe an algorithmic decision procedure which determines whether the composition of secrecy preserving processes is still secrecy preserving. As a case-study we consider a variant of the TLS protocol where, even though the client and server considered separately would be viewed as preserving the secrecy of the data to be communicated, its composition to the complete protocol does not preserve that secrecy. We also show results on tool support that allows one to validate the efficiency of our algorithm for multiple compositions.