ESSM: Formal Analysis Framework for Protocol to Support Algebraic Operations and More Attack Capabilities

Abstract

The strand space model has been proposed as a formal method for verifying the security goals of cryptographic protocols. However, only encryption and decryption operations and hash functions are currently supported for the semantics of cryptographic primitives. Therefore, we establish the extended strand space model (ESSM) framework to describe algebraic operations and advanced threat models. Based on the ESSM, we add algebraic semantics, including the Abelian group and the XOR operation, and a threat model based on algebraic attacks, key-compromise impersonation attacks, and guess attacks. We implement our model using the automatic analysis tool, Scyther. We demonstrate the effectiveness of our framework by analysing several protocols, in particular a three-factor agreement protocol, with which we can identify new attacks while providing trace proofs.

The “Double-Edged Sword” Effect of Personal Relationships between Boundary Personnel on Enterprise Opportunistic Behavior in Cooperative Innovation

“…However, the negative impact of such close personal relations between employees at the boundary of enterprises cannot be ignored, such as inducing opportunistic behaviors in enterprise cooperation [40]. The governance modes adopted for such inter-enterprise cooperation generally include relationship governance and contract governance [20,21]; contract governance places more emphasis on the economic attributes of cooperation between KIBS enterprises and organizational customers [41], aiming to define the obligations and responsibilities of both parties through signing contracts. While giving the other enterprises in the implementation of opportunism behaviors the power to safeguard the legitimate rights and interests of their business via third parties [42], this governance model more commonly uses the established standards to guide the behaviors of both parties in the process of cooperation.…”