The main innovation of this paper -------- use Scyther tool in the discovery of omission on the part of KCI attack appeared search phenomenon, and gives the reason for the existence of,
Introduces the formal analysis tool AVispa stands for Automated Validation of Internet Security-sensitive Protocols and Applications, more use in the analysis of large-scale network security protocols, providing a model operation and formal language used to describe the characteristics and behavior of the protocol, the current from the integration Finding agreement to attack a number of formal analysis techniques and other aspects of protocol abstraction verification, protocol attacks look good, but the lack of agreement on verification and establish safety performance,
Scyther Athena algorithm using protocol analysis, assisted theorem proving and model verification and other analysis techniques, efficient and accurate, suitable for protocol analysis includes a main body and the cooperative agreement includes analysis of changing, then the simple principle Scyther tool is running, FIG described below: operational flow ------- ------ "Scyther written to the formal description of the protocol code system lead ---------- Scyther protocol according to the operational semantics into multilateral body size, and then call Athena protocol analysis algorithm to determine Scyther -------- system can build a counter-example ---------- if the output Fail security statement --- -------- OK representation is not the safe output
The results of the discovery: by the underlying algorithm analysis, we found Scyther does not contain embedded nature of algebra, which means that the tool is difficult to find the attack included algebra, Solution: After upgrade tools ------ Tamarin version of the more prominent tool in algebra, supports associative, commutative law, the nature of the algebra and bilinear DH exponentiation peer.