Generating attack scenarios for the validation of security protocol implementations - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès SAST '08 : 2nd Brazilian Workshop on Systematic and Automated Software Testing Année : 2008

Generating attack scenarios for the validation of security protocol implementations

Résumé

In this paper we consider the validation of security protocols, whose aim is to ensure some security properties when the communication medium is not reliable. The goal is to uncover protocol vulnerabilities that an attacker can exploit and cause security failures. Our approach uses a fault injector to inject attacks into a communication system and observe whether the security properties are violated. One of the key problems is: how to generate successful attacks that will indicate the existence of vulnerabilities? We propose an approach that is similar to model-based testing, as we derive attack scenarios from an attack model representing known attacks to the protocol under test. The approach can be completely supported by tools, as is shown in the paper.
Fichier non déposé

Dates et versions

hal-00796077 , version 1 (01-03-2013)

Identifiants

  • HAL Id : hal-00796077 , version 1

Citer

Eliane Martins, Anderson Morais, Ana Rosa Cavalli. Generating attack scenarios for the validation of security protocol implementations. SAST '08 : 2nd Brazilian Workshop on Systematic and Automated Software Testing, Oct 2008, Campinas, Brazil. pp.21-33. ⟨hal-00796077⟩
37 Consultations
0 Téléchargements

Partager

Gmail Facebook X LinkedIn More