loading...
A Formal Analysis of Some Properties of Kerberos 5 Using MSR
Cape Breton, Nova Scotia, Canada June 24-June 26
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/CSFW.2002.102181515th IEEE Computer Security Foundatio ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Frederick Butler, University of Pennsylvania
Iliano Cervesato, ITT Industries, Inc.
Aaron D. Jaggard, University of Pennsylvania
Andre Scedrov, University of Pennsylvania
We formalize aspects of the Kerberos 5 authentication protocol in the Multi-Set Rewriting formalism (MSR) on two levels of detail. The more detailed formalization reflects the intricate structure of the Kerberos 5 specification, taking into account several protocol features which have not been previously considered. In the abstract formalization, we prove an authentication property about Kerberos 5. We discovered three anomalies, one of which occurs on both levels of detail, while the other two rely on the richer structure of the detailed formalization. We also discuss how the addition of checksums (some of which are in the protocol specification and some of which are not) may eliminate some of these anomalies.
Citation:
Frederick Butler, Iliano Cervesato, Aaron D. Jaggard, Andre Scedrov, "A Formal Analysis of Some Properties of Kerberos 5 Using MSR," csfw, pp.175, 15th IEEE Computer Security Foundations Workshop (CSFW'02), 2002
Usage of this product signifies your acceptance of the Terms of Use.