Modular verification of security protocol code by typing

DMCA

Modular verification of security protocol code by typing (2010)

Cached

Download Links

by Karthikeyan Bhargavan , Cédric Fournet , Andrew D. Gordon

Venue:	in: Proceedings of the 37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL
Citations:	50 - 17 self

BibTeX

@INPROCEEDINGS{Bhargavan10modularverification,
    author = {Karthikeyan Bhargavan and Cédric Fournet and Andrew D. Gordon},
    title = {Modular verification of security protocol code by typing},
    booktitle = {in: Proceedings of the 37th ACM SIGACT-SIGPLAN Symposium on Principles of Programming Languages (POPL},
    year = {2010}
}

OpenURL

Abstract

We propose a method for verifying the security of protocol implementations. Our method is based on declaring and enforcing invariants on the usage of cryptography. We develop cryptographic libraries that embed a logic model of their cryptographic structures and that specify preconditions and postconditions on their functions so as to maintain their invariants. We present a theory to justify the soundness of modular code verification via our method. We implement the method for protocols coded in F # and verified using F7, our SMT-based typechecker for refinement types, that is, types carrying formulas to record invariants. As illustrated by a series of programming examples, our method can flexibly deal with a range of different cryptographic constructions and protocols. We evaluate the method on a series of larger case studies of protocol code, previously checked using whole-program analyses based on ProVerif, a leading verifier for cryptographic protocols. Our results indicate that compositional verification by typechecking with refinement types is more scalable than the best domainspecific analysis currently available for cryptographic code.

Keyphrases

modular verification security protocol code refinement type cryptographic library record invariant whole-program analysis case study protocol implementation protocol code cryptographic protocol smt-based typechecker logic model modular code verification compositional verification different cryptographic construction domainspecific analysis cryptographic code cryptographic structure

DMCA