Dissertation > Excellent graduate degree dissertation topics show

Research on Security of E-Commerce Protocols Based on UPPAAL

Author: JiHongLin
Tutor: DuZhuPing；MaChuanGui
School: PLA Information Engineering University
Course: Software Engineering
Keywords: E-commerce protocol Model checking Unreliable environments ISI payment protocol Anonymous and Failure Resilient Fair-exchange Ecommerce protocol UPPAAL
CLC: TP393.08
Type: Master's thesis
Year: 2008
Downloads: 45
Quote: 0
Read: Download Dissertation

Abstract


E-commerce is gradually gaining large-scale application with the fast development of network. Meanwhile, e-commerce security is becoming more and more serious and has become the major concern of shoppers when paying online with credit cards. No e-commerce is acceptable without security. While secure e-commerce protocols are fundamental to e-commerce, a seemingly secure protocol often has security flows. Hence, analysis of various types should be carried out on the properties of an e-commerce protocol, among which protocol verification is of great importance.As an automated verification tool based on time automata, UPPAAL has been successfully used for analyzing the security and liveliness of communication protocols. But it was known that UPPAAL was seldom used to analyze the security of e-commerce protocols.This paper’s main contribution is the failure analysis of e-commerce protocol using UPPAAL. The contributions include: the ISI protocal is verified, verification results show that fairness does not hold for ISI payment protocol; A model concerning the participants of the anonymous and retrievable fair exchange protocol is built by UPPAAL, verification results show that fair exchange protocol satisfy liveness and time efficiency. The security properties of single run of fair exchange protocol Franklin/Reiter in unreliable environments are analyzed by UPPAAL. Result show that when running in unreliable environments, the secure e-commerece protocol may become insecure, in which case the message sequence given by UPPAAL is utilized to investigate the reasons and carry out corresponding modifications to obtain a secure protocol again. All results in this paper show that UPPAAL is specifically applicable to unreliable environments and can improve the protocol by utilizing the generated message sequence.

Related Dissertations

  1. Research on the Methods for Detecting Mismatch of Web Services Based on Bounded Model Checking,TP311.52
  2. Formal Verification of Safety Computer Platform in CBTC System Based on Timed Automata Model,U284.48
  3. Research and Implement on Static Malware Detection System Based on Program Semantics,TP393.08
  4. Modeling and Verification of On-Board Equipment of CTCS-3 Train Operation Control System Based on Timed Automata,U284.48
  5. Model Checking Applied to Verification of OS Kernel,TP316
  6. Analyzing and Verifying Network Protocols by Model Checking,TP393.04
  7. Model Checking Research for LINUX Kernel Interprocess Communication,TP316.81
  8. Two yuan judgment diagram BDD and JAVA realization Application and Research,TP311.52
  9. UPPAAL approach based interlocking control flow modeling and verification,U284.37
  10. ParaModel system model validation and code generation framework,TP338.6
  11. Formal Analysis and Verification of a Transaction Coordination Protocol Named WS-TX for Web Services,TP393.09
  12. Research on a Secure E-Commerce Payment Protocol Based on Four Parties,TP393.08
  13. Security Protocol Analysis and Verification Based on Model Checker SPIN,TP393.08
  14. Wada subprojects salt and water balance studies,P332.7
  15. Framed Temporal Logic Programming Interpreter and Model Checker,TP311.52
  16. Model Checking Propositional Projection Temporal Logic Based on SPIN,TP311.52
  17. Verification of UML Activity Chart Using SPIN,TP311.52
  18. Analysis and Studying of Authentication Protocols,TP393.08
  19. Research on Model Checking Technology of Software Vulnerability,TP311.52
  20. UML interaction model checking based on temporal logic,TP311.52

CLC: > Industrial Technology > Automation technology,computer technology > Computing technology,computer technology > Computer applications > Computer network > General issues > Computer Network Security
© 2012 www.DissertationTopic.Net  Mobile