Istituto di Informatica e Telematica     
Bella G., Bistarelli S., Masacci F. Retaliation: Can We Live with Flaws?. In: NATO ARW Information Security Assurance and Security 2005 (ARWIAS'05) 3 Jun 2005 - 4 Jun 2005 : Tetuan, Marocco (Tetuan (Marocco), 2006). Proceedings, pp. 3 - 14. IOS Press, 2006.
Security protocols intend to give their parties reasonable assurance that certain security properties will protect their communication session. However, the literature confirms that the protocols may suffer subtle and hidden attacks. Flawed protocols are customarily sent back to the design process, but the costs of reengineering a deployed protocol may be prohibitive. This paper outlines the concept of retaliation: who would steal a sum of money today, should this pose significant risks of having twice as much stolen back tomorrow? Attacks are always balanced decisions: if an attack can be retaliated, the economics of security may convince us to live with a flawed protocol. This new perspective requires a new threat model where any party may decide to subvert the protocol for his own sake, depending on the risks of retaliation. This threat model, which for example is also suitable to studying non-repudiation protocols, seems more appropriate than the Dolev-Yao model to the present technological/social setting.
Subject Security
specification techniques
protocol verification
network security and protection
K.6.5 Security and Protection

Icona documento 1) Download Document PDF

Icona documento Open access Icona documento Restricted Icona documento Private


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional