A comparative study of security protocols validation tools: HERMES vs. AVISPA

Hussain, Muzzammil; Seret, Dominique

doi:10.1109/icact.2006.205974

Cited by 15 publications

(10 citation statements)

References 11 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The important ones are HERMES and AVISPA. A detailed comparison of these two tools is given in [32]. From this, we find that while HERMES can be used for simple protocols that do not have a lot of security requirements, AVISPA is more suitable for validating large scale security protocols.…”

Section: Validationmentioning

confidence: 97%

Router authentication, key management, and adjacency management for securing inter-router control messages

Somanatha

Atwood

2015

Computer Networks

View full text Add to dashboard Cite

Section: Validationmentioning

confidence: 97%

Router authentication, key management, and adjacency management for securing inter-router control messages

Somanatha

Atwood

2015

Computer Networks

View full text Add to dashboard Cite

“…Results in AVISPA are detailed and explicitly given with reachable number of states. Therefore regarding result interpretation, AVISPA requires no expertise or skills in mathematics contrary to other tools like HERMES [15] where a great deal of experience is at least necessary to get meaningful conclusions. In the HLPSL model of our protocol we define several roles; agent, agency A, agency B, TPM agency A, TPM agency B and environment.…”

Section: Appendix a Avispa Codementioning

confidence: 98%

The role of Trusted Computing in secure agent migration

Muñoz

Maña

Serrano

2009

2009 Third International Conference on Research Challenges in Information Science

View full text Add to dashboard Cite

Software agents are a promising computing paradigm. Scientific community has devoted important efforts to this field [1]. Indeed, several important applications exist based on this technology. Despite of their benefits, the lack of the appropriate security mechanisms for agent based systems represents a barrier for the widespread use of this technology. Additionally, the application of the current security techniques is not trivial for agent based system developers, which are usually not security experts. This paper presents a hardware based protection infrastructure that takes advantage of the recent advances in trusted hardware in order to solve the problem known as the malicious host in mobile agent systems. This infrastructure is composed of extensions to the JADE framework and the Trusted Computing technology. Additionally, the protocol used in this implementation has been validated using the Automated Validation of Internet Security Protocols and Applications (AVISPA) as we described in the paper.

show abstract

“…Results in AVISPA are detailed and explicitly given with reachable number of states. Therefore regarding result interpretation, AVISPA requires no expertise or skills in mathematics contrary to other tools like HER-MES [29] where a great deal of experience is at least necessary to get meaningful conclusions.…”

Section: Formal Verification Of the Protocolmentioning

confidence: 99%

TPM‐based protection for mobile agents

Muñoz¹,

Maña²

2010

Security Comm Networks

View full text Add to dashboard Cite

Mobile agent is a promising paradigm for emerging ubiquitous computing and ambient intelligent scenarios. We believe that security is the most important issue for the widespread deployment of applications based on mobile agent technology. Indeed, community agrees that without the proper security mechanisms, use of mobile agent-based applications will be impossible. From our perspective, the security problem in mobile agents is the gathering of two subproblems; the problem of the agent protection and the problem of the host protection. This paper presents a hardware-based mechanism focused on solving the protection of the agent problem, which is a well known problem named the 'malicious host'. The solution presented in this paper bases its security in the trust and the security functionalities provided by the trusted platform module (TPM). Thus, migration process of mobile agents is protected when it actually takes place. A complete description of the secure migration can be found in the secure migration protocol section of this paper. Moreover, a validation of this protocol was performed by means of the AVISPA tool suite. Additionally, a first study about the use of an alternative protocol as the direct anonymous attestation protocol was done. Finally, the result of this work is the Secure Migration Library for agents (SecMiLiA), which is completely described in following sections.

show abstract

A comparative study of security protocols validation tools: HERMES vs. AVISPA

Cited by 15 publications

References 11 publications

Router authentication, key management, and adjacency management for securing inter-router control messages

Router authentication, key management, and adjacency management for securing inter-router control messages

The role of Trusted Computing in secure agent migration

TPM‐based protection for mobile agents

Contact Info

Product

Resources

About