POWRE: Certification of Security Protocols

9753055兰道，苏珊大学，马萨诸塞州POWRE：安全协议的认证这项研究涉及协议和其他使用密码技术构建的系统的安全属性。调查人员关注两个主要问题；第一个是“协议破解”，它研究由其他部分(如安全加密系统)构建的复杂协议如何通过滥用加密部分或通过对它们的不合理假设而变得不安全。正在解决的第二个问题是开发证明安全属性的方法。协议破译的研究涉及对已提出的基于口令的会话密钥协商协议的检查，并研究认证方案可以安全地合并一小段共享秘密信息(例如口令)的特征。研究人员开发了多用户认证协议，用于在群体庞大和不断变化的情况下进行认证；技术包括图论和代数方法。研究人员正在研究分布式网络中用于认证的密码系统的认证方案。开发认证方案意味着为密码系统上出现的各种类型的攻击开发一个逻辑框架，然后开发一套适当的测试。分布式算法的工作涉及开发协议以在多用户环境中授权。

9753055 Landau, Susan University of Massachusetts POWRE: Certification of Security Protocols This research involves security properties of protocols and other systems that are built with cryptographic techniques. Investigators look at two principal issues; the first is ``protocol busting,'' which studies how complex protocols built from other pieces (such as secure cryptographic systems) can become insecure through misuse of the cryptographic pieces or through unwarranted assumptions about them. The second issue being tackled is developing methods to certify security properties. Research in protocol-busting involves the examination of proposed password-based session-key agreement protocols, and studies characterizations under which an authentication scheme can safely incorporate a small shared piece of secret information (e.g. a password). The investigators develop protocols for multi-user authentication when the group is large and in flux; techniques include graph-theoretic and algebraic methods. The investigator is studying certification schemes of cryptosystems for authentication in a distributed network. Developing a certification scheme means developing a logical framework for the various types of attacks that have arisen on cryptosystems, and then developing a suite of appropriate tests. The distributed algorithms work concerns developing protocols to delegate authority in a multi-user environment.