CT-ISG: Specification and Verification Challenges for Security Protocols in Sensor Networks

Hridesh Rajan Iowa州立大学传感器网络安全协议的规范和验证挑战小组：P060979安全协议中的规则微妙且难以找到。发现传感器网络安全协议中的缺陷更加困难，因为它们在根本不同的系统设计假设下工作，例如事件驱动或命令或消息传递、资源和带宽限制、敌意部署场景、由于缺乏抵抗力而导致的琐碎物理捕获、面向组的行为、自组织和动态拓扑、开放的性质等。这些假设导致复杂的安全协议，这反过来使它们更难验证。传感器网络正日益成为国家网络基础设施不可或缺的一部分，因此保护它们免受安全协议中的密码错误的影响至关重要。有几种用于指定和验证加密协议的现有技术；然而，没有一种技术满足上述所有系统设计假设。这项研究是对传感器网络密码协议的描述和验证的最新进展。从军事到环境研究，传感器网络的应用非常广泛。通过提供机制来查找传感器网络安全协议中的密码错误，该研究计划正在提高这些网络的可靠性，对使用这些网络的所有领域产生直接影响。这一研究计划中的活动共同促进了传感器网络安全协议的创新规范和验证机制的开发，并在编程语言、软件工程、计算机网络以及最重要的增强计算机安全方面培训了一批年轻的科学家。

Hridesh RajanIowa State UniversitySpecification and verification challenges for security protocols in sensor networks0627354Panel: P060979Flaws in security protocols are subtle and hard to find. Finding flaws in the security protocols for sensor networks is even harder because they operate under fundamentally different system design assumptions such as event-driven vs. imperative or message passing, resource and bandwidth constraints, hostile deployment scenarios, trivial physical capturing due to the lack of temper resistance, group-oriented behavior, ad hoc and dynamic topologies, open-ended nature, etc. These assumptions lead to complex security protocols, which in turn makes them much harder to verify. Sensor networks are increasingly becoming an integral part of the nation's cyber infrastructure, making it vital to protect them against cryptographic errors in security protocols. There are several existing techniques for specifying and verifying cryptographic protocols; however, none accommodates all the system design assumptions mentioned above. This research is advancing the state of the art in specification and verification of cryptographic protocols for sensor networks. Applications of sensor networks are numerous from military to environmental research. By providing mechanisms to find cryptographic errors in the security protocols for sensor networks this research program is improving the reliability of these networks, making a direct impact on all areas where these networks are utilized. The activities in this research program are collectively contributing to the development of innovative specification and verification mechanisms for security protocols in sensor networks, and training of a diverse cadre of young scientists in programming languages, software engineering, computer networks, and most importantly enhanced computer security.