Automated analysis of security-sensitive protocols

October 25, 2005

"The AVISPA software tool enables a security protocol designer to input the protocol and the language he/she wishes to use, then feeds back information on this protocol including any known bugs or security weaknesses," says Professor Alessandro Armando of the University of Genoa's Artificial Intelligence Laboratory (DIST) and coordinator of the IST programme-backed Future and Emerging Technologies project AVISPA. "Previously such protocol designers had no automated support to help them in their design role - that is the purpose of the AVISPA tool."

Secure protocols are a vital element in carrying out safe online interactions between a user's Web browser and a company Web server, for example a bank's Web server in an online banking application. Though such protocols might look simple, they can often be extremely difficult to get absolutely right, such as with no bugs or weaknesses in the protocol.

Armando quotes the classic example of the Needham-Schroeder public-key protocol, which was first published in 1978 as a means of mutual authentication between two parties using public-key cryptography. The protocol was eventually found to be vulnerable to simple attacks in 1996, eighteen years later!

AVISPA participants aimed to develop a push-button, industrial-strength technology for the analysis of such security-sensitive Internet protocols and applications. The project finished in July 2005 with the release of the AVISPA tool, which is a simple software application that runs on a PC or via a Web interface. It can be accessed online, and offers both a Basic and an Expert mode.

The consortium partners believe that this new tool will help speed the development of the next generation of security protocols, and improve their security in the process.

Project partner Siemens has already discovered a weakness in one of its own protocols using the tool, and has revised the protocol and issued a new patent accordingly. The partners have also been joined by SAP and submitted the AVISPA results for inclusion into a potential new IST project AVACOSS which will analyse more complex security-sensitive applications.
-end-
Contact: Professor Alessandro Armando
Artificial Intelligence Laboratory (DIST)
University of Genoa
I-16145 Genoa
Italy
Tel: +39-010-3532216
Mob: +39-328-1003201
Email: armando@dist.unige.it
http://www.avispa-project.org

IST Results

Related Partners Articles from Brightsurf:

Post-traumatic stress experienced by partners following miscarriage
One in 12 partners experience post-traumatic stress after miscarriage, suggests a new study.

Romantic partners influence each other's goals
Over the long-term, what one partner in a two-person relationship wishes to avoid, so too does the other partner -- and what one wants to achieve, so does the other.

Women and men still choose partners like they used to
Men and women choose partners according to different criteria. These are the same almost all over the world and have remained unchanged in the last 30 years, according to a new survey of 14 000 people.

PTSD partners feel invisible, study finds
Recognition of the needs of wives and intimate partners in supporting the recovery of veterans and front-line emergency workers affected by post-traumatic stress disorder (PTSD) has been highlighted in a new study led by Flinders University.

Microscopic partners could help plants survive stressful environments
Tiny, symbiotic fungi play an outsized role in helping plants survive stresses like drought and extreme temperatures, which could help feed a planet experiencing climate change, report scientists at Washington State University.

The influence of alcohol consumption among cohabitating partners
Research has linked a partner's or spouse's drinking with changes in alcohol-related behaviors, but few studies have considered only cohabiting relationships.

Depression and binge-drinking more common among military partners
New research from King's College London suggests that depression and binge-drinking are more common among the female partners of UK military personnel than among comparable women outside the military community.

Children and partners are key
Fewer children, distant relatives or friends, and an increasing plurality of family models: These factors impact on the availability of support and care in old age.

'Mindreading' neurons simulate decisions of social partners
Scientists have identified special types of brain cells that may allow us to simulate the decision-making processes of others, thereby reconstructing their state of mind and predicting their intentions.

Stowaway fungi hitch a ride with birds to be with their plant partners
For the first time, scientists have shown that fungal hitchhikers use birds to colonize new territories with their plant partners.

Read More: Partners News and Partners Current Events
Brightsurf.com is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon.com.