CT-ISG: Specification and Verification Challenges for Security Protocols in Sensor Networks

Hridesh RajanIowa州立大学传感器网络中安全协议的规范和验证挑战[0627354]面板：p060979安全协议的缺陷是微妙的，很难发现。寻找传感器网络安全协议中的缺陷更加困难，因为它们在根本不同的系统设计假设下运行，例如事件驱动vs命令式或消息传递，资源和带宽约束，恶意部署场景，由于缺乏脾气抵抗而产生的琐碎物理捕获，面向组的行为，临时和动态拓扑，开放式性质等。这些假设导致了复杂的安全协议，这反过来又使它们更加难以验证。传感器网络正日益成为国家网络基础设施不可或缺的一部分，因此保护它们免受安全协议中加密错误的影响至关重要。有几种现有的技术用于指定和验证加密协议；然而，没有一个能够满足上面提到的所有系统设计假设。这项研究推动了传感器网络加密协议规范和验证技术的发展。从军事到环境研究，传感器网络的应用非常广泛。通过提供在传感器网络安全协议中发现密码错误的机制，该研究项目正在提高这些网络的可靠性，对这些网络使用的所有领域产生直接影响。本研究项目的活动共同为传感器网络安全协议的创新规范和验证机制的发展做出了贡献，并在编程语言、软件工程、计算机网络以及最重要的增强计算机安全方面培养了一批不同类型的年轻科学家。

Hridesh RajanIowa State UniversitySpecification and verification challenges for security protocols in sensor networks0627354Panel: P060979Flaws in security protocols are subtle and hard to find. Finding flaws in the security protocols for sensor networks is even harder because they operate under fundamentally different system design assumptions such as event-driven vs. imperative or message passing, resource and bandwidth constraints, hostile deployment scenarios, trivial physical capturing due to the lack of temper resistance, group-oriented behavior, ad hoc and dynamic topologies, open-ended nature, etc. These assumptions lead to complex security protocols, which in turn makes them much harder to verify. Sensor networks are increasingly becoming an integral part of the nation's cyber infrastructure, making it vital to protect them against cryptographic errors in security protocols. There are several existing techniques for specifying and verifying cryptographic protocols; however, none accommodates all the system design assumptions mentioned above. This research is advancing the state of the art in specification and verification of cryptographic protocols for sensor networks. Applications of sensor networks are numerous from military to environmental research. By providing mechanisms to find cryptographic errors in the security protocols for sensor networks this research program is improving the reliability of these networks, making a direct impact on all areas where these networks are utilized. The activities in this research program are collectively contributing to the development of innovative specification and verification mechanisms for security protocols in sensor networks, and training of a diverse cadre of young scientists in programming languages, software engineering, computer networks, and most importantly enhanced computer security.