A Systematic Approach to Formal Analysis of QUIC Handshake Protocol Using Symbolic Model Checking-Reference-Cited by-同舟云学术

A Systematic Approach to Formal Analysis of QUIC Handshake Protocol Using Symbolic Model Checking

Published:2021-08-20 Issue: Volume:2021 Page:1-12
ISSN:1939-0122
Container-title:Security and Communication Networks
language:en
Short-container-title:Security and Communication Networks

Author:

Zhang Jingjing¹^ORCID,Gao Xianming¹^ORCID,Yang Lin¹^ORCID,Feng Tao¹^ORCID,Li Dongyang²^ORCID,Wang Qiang¹^ORCID

Affiliation:

1. National Key Laboratory of Science and Technology on Information System Security, Institute of System Engineering, Chinese Academy of Military Science, Beijing 100039, China

2. College of Command and Control Engineering, Army Engineering University of China, Nanjing 210007, China

Abstract

As a newly proposed secure transport protocol, QUIC aims to improve the transport performance of HTTPS traffic and enable rapid deployment and evolution of transport mechanisms. QUIC is currently in the IETF standardization process and will potentially carry a significant portion of Internet traffic in the emerging future. An important safety goal of QUIC protocol is to provide effective data service for users. To aim this safety requirement, we propose a formal analysis method to analyze the safety of QUIC handshake protocol by using model checker SPIN and cryptographic protocol verifier ProVerif. Our analysis shows the counterexamples to safety properties, which reveal a design flaw in the current protocol specification. To this end, we also propose and verify a possible fix that is able to mitigate these flaws.

Publisher

Hindawi Limited

Subject

Computer Networks and Communications,Information Systems

Link

http://downloads.hindawi.com/journals/scn/2021/1630223.pdf

Reference27 articles.

1. Model Checking Security Protocols

2. An attack on the Needham-Schroeder public-key authentication protocol

3. SATMC: A SAT-Based Model Checker for Security Protocols

4. OFMC: A symbolic model checker for security protocols

Cited by 6 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Timeliness of Multipath Redundant Transmissions When All Paths are not Accessible for Some Request Sources;Artificial Intelligence in Models, Methods and Applications;2023

2. Revisiting QUIC attacks: a comprehensive review on QUIC security and a hands-on study;International Journal of Information Security;2022-12-02

3. A Survey on the Security Issues of QUIC;2022 6th Cyber Security in Networking Conference (CSNet);2022-10-24

4. A Novel Model for Large-Scale Online College Learning in Postpandemic Era: AI-Driven Approach;Mobile Information Systems;2021-12-14

5. A Critical Review on Secure Authentication in Wireless Network;Lecture Notes in Electrical Engineering;2021-08-20