POWRE: Certification of Security Protocols

power：安全协议的认证本研究涉及使用加密技术构建的协议和其他系统的安全属性。调查人员关注两个主要问题；第一个是“协议破坏”，它研究从其他部分（如安全加密系统）构建的复杂协议如何通过滥用加密部分或通过对它们的无根据假设而变得不安全。正在解决的第二个问题是开发认证安全属性的方法。协议破坏的研究涉及到对基于密码的会话密钥协议的审查，以及研究认证方案可以安全地包含一小块共享秘密信息（例如密码）的特征。研究人员开发了多用户身份验证协议，当群体很大且不断变化时；技术包括图论和代数方法。研究者正在研究分布式网络中用于身份验证的密码系统的认证方案。开发认证方案意味着为密码系统上出现的各种类型的攻击开发一个逻辑框架，然后开发一套适当的测试。分布式算法的工作涉及在多用户环境中开发授权协议。

9753055 Landau, Susan University of Massachusetts POWRE: Certification of Security Protocols This research involves security properties of protocols and other systems that are built with cryptographic techniques. Investigators look at two principal issues; the first is ``protocol busting,'' which studies how complex protocols built from other pieces (such as secure cryptographic systems) can become insecure through misuse of the cryptographic pieces or through unwarranted assumptions about them. The second issue being tackled is developing methods to certify security properties. Research in protocol-busting involves the examination of proposed password-based session-key agreement protocols, and studies characterizations under which an authentication scheme can safely incorporate a small shared piece of secret information (e.g. a password). The investigators develop protocols for multi-user authentication when the group is large and in flux; techniques include graph-theoretic and algebraic methods. The investigator is studying certification schemes of cryptosystems for authentication in a distributed network. Developing a certification scheme means developing a logical framework for the various types of attacks that have arisen on cryptosystems, and then developing a suite of appropriate tests. The distributed algorithms work concerns developing protocols to delegate authority in a multi-user environment.