Download:
|
by Nevin Heintze, J. D. Tygar, Jeannette Wing, H. C. Wong
In Proc. of the USENIX 1996 Workshop on Electronic Commerce
http://www.cs.cmu.edu/afs/cs.cmu.edu/project/venari/www/../papers/usenix96a/mcecp.ps
Add To MetaCart
Abstract:
The paper develops model checking techniques to examine NetBill and Digicash. We show how model checking can find atomicity problems by analyzing simplified versions of these protocols that retain crucial security problems. For our analysis we used the FDR model checker [13]. Note to reviewers: This is an extended abstract only. We anticipate that some of the work described in Section 5 will be completed by the time that the camera-ready copy of this paper is due (if it is accepted.) 1 Atomicity Properties Correctness is a prime concern for electronic commerce protocols. How can we show that a given protocol is safe for use? Here we show how to use model checking to test whether electronic commerce protocols satisfy some given atomicity properties. For verifying properties of protocols, model checking is a dramatic improvement over doing hand proofs, because it is mechanizable; it is a dramatic improvement over using state-of-the-art theorem provers because it is automatic, fast, and requires no human interaction. Moreover, we found a number of problems in proposed electronic commerce protocols using model checking.
Citations
|
2677
|
Communicating Sequential Processes
– Hoare
- 1978
|
|
714
|
Design and Validation of Computer Protocols
– Holzmann
- 1991
|
|
697
|
Using encryption for authentication in large networks of computers
– Needham, Schroeder
- 1978
|
|
432
|
Symbolic Model Checking: An Approach to the State-explosion Problem
– McMillan
- 1992
|
|
299
|
Security without Identification: Transaction Systems to Make Big Brother Obsolete
– Chaum
- 1985
|
|
205
|
Untraceable electronic cash
– Chaum, Fiat, et al.
- 1988
|
|
205
|
Protocol Verification as a Hardware Design Aid
– Dill, Drexler, et al.
- 1992
|
|
162
|
Atomic Transactions
– Lynch, Merritt, et al.
- 1994
|
|
95
|
Netbill security and transaction protocol
– Cox, Tygar, et al.
- 1995
|
|
78
|
NetBill: An Internet Commerce System Optimized for Network Delivered Services
– Sirbu, Tygar
- 1995
|
|
62
|
CSP and determinism in security modelling
– Roscoe
|
|
51
|
Atomicity in Electronic Commerce
– Tygar
- 1996
|
|
44
|
Software for analytical development of communication protocols
– Kurshan
- 1990
|
|
34
|
Communicating Sequential Processes. Prentice-Hall
– Hoare
- 1985
|
|
13
|
Security without identi cation: Transaction systems to make big brother obsolete
– Chaum
- 1985
|
|
13
|
Nitpick: A checkable specification language
– Jackson
- 1996
|
|
11
|
Token and Notational Money in Electronic Commerce
– Camp, Sirbu, et al.
- 1995
|
|
11
|
A transaction model
– Gray
- 1980
|
|
10
|
Algorithms for Construction and Analysis of Systems (TACAS 01), LNCS 2031
– Tools
|
|
8
|
Design and Validation of Computer Protocols. Prentice-Hall, Englewood Cli s
– Holzmann
- 1991
|
|
6
|
Protocol veri cation as a hardware design aid
– Dill, Drexler, et al.
- 1992
|
|
3
|
A case study in model-checking CSP. submitted for publication
– Roscoe, MacCarthy
- 1994
|
|
1
|
Nitpick: A checkable speci cation language
– Jackson
- 1996
|