Istituto di Scienza e Tecnologie dell'Informazione     
Ter Beek M. H., Moiso C., Petrocchi M. Modelling and analysing an identity federation protocol: federated network providers scenario. In: 2nd European Young Researchers Workshop on Service Oriented Computing. YR-SOC'07 (Leicester, Gran Bretagna, 11-12 Giugno 2007).
We continue our work on modelling and analysing security issues of an identity federation protocol for convergent networks. This protocol was proposed by Telecom Italia as a solution to allow end users access to services on the web through different access networks, without explicitly providing any credentials, while the service providers can trust the user's identity information provided by the access networks and access some user data. As an intermediate step towards a full-blown formal security analysis of this protocol, we specify one specific user scenario in the process algebra Crypto-CCS and verify its vulnerability w.r.t. a man-in-the-middle attack with the model checker PaMoChSA.
URL: http://fmt.isti.cnr.it/WEBPAPER/final-fnp.pdf
Subject Network protocols
Model checking
Process algebra
D.2.4 Software/Program Verification. Formal methods
D.4.6 Security and Protection - Verification
K.6.5 Security and Protection
D.2.4 Software/Program Verification. Model checking

Icona documento 1) Download Document PDF

Icona documento Open access Icona documento Restricted Icona documento Private


Per ulteriori informazioni, contattare: Librarian http://puma.isti.cnr.it

Valid HTML 4.0 Transitional