Abstractions for security protocol verification

Abstract

We present a large class of security protocol abstractions with the aim of improving the scope and efficiency of verification tools. We propose typed abstractions, which transform a term's structure based on its type, and untyped abstractions, which remove atomic messages, variables, and redundant terms. Our theory improves on previous work by supporting a useful subclass of shallow subterm-convergent rewrite theories, user-defined types, and untyped variables to cover type flaw attacks. We prove soundness results for an expressive property language that includes secrecy and authentication. Applying our abstractions to realistic IETF protocol models, we achieve dramatic speedups and extend the scope of several modern security protocol analyzers.

Symbolically analyzing security protocols using tamarin

“…An open research question is to determine under which conditions abstraction methods can improve TAMARIN's analysis. As a starting point, one could consider works such as [Nguyen and Sprenger 2015] that apply directly to TAMARIN's predecessor, Scyther. The reason why these methods do not trivially translate to TAMARIN is that more domain-specific specification languages (such as Scyther's) have clearly defined notions of protocols, roles, and the adversary.…”