This paper presents an architecture and tools for verifying implementations of security protocols. The implementations can run with both concrete and symbolic cryptographic libraries. The concrete implementation is for production and interoperability testing. The symbolic implementation is for debugging and formal verification. The paper develops the approach for protocols written in F#, a dialect of ML, and verifies them by compilation to ProVerif, a resolution-based theorem prover for cryptographic protocols. The paper establishes the correctness of this compilation scheme, and illustrates the approach with protocols for Web Services security.
Did you find this white paper useful?
25 out of 47 users found this white paper useful
Related white papers
Balancing Security Against Productivity
What makes for great security? Is it about keeping the bad guys out or letting the good guys in? About defending attacks or preventing them? When IDG Research Services queried...
Novell Zenworks Endpoint Security Management: Total Control from a Single Console
Still super gluing your USB ports shut? Unauthorized access to networks, lost or stolen laptops and other mobile hardware, and theft of proprietary information or intellectual property accounted for more...
Secure Desktop On-Demand Webcast
The desktop or endpoint is one of the most vulnerable parts of your environment. Threats are everywhere. You have users who love to experiment with device settings (only to wonder...
Hitachi Consulting Secures IP Telephony Network Using TippingPoint Intrusion Prevention System
No one knows better than Hitachi Consulting how vulnerable today's networks are to crippling attacks and malware. When Code Red and Welchia worms invaded Hitachi Consulting's development servers at its...
Identity and Access Management - Level 200
Identity management solutions can be used to create and manage user account information efficiently and securely across multiple systems within an enterprise. Learn how identity information may be shared and...
The MyDoom Worm
An e-mail worm continued to clog Internet traffic this week, spreading faster than previous Web bugs by appearing as an innocuous error message. The worm - dubbed "MyDoom," "Novarg" or...
Commercial Leasing Company Increases Security With Desktop Operating System Solution
Signature Capital provides customized vehicle and equipment financing packages to meet the specific financial needs of its clients. As a small startup company, Signature Capital was lacking the resources it...
