SSL协议的扩展Rubin逻辑形式化分析  

Extended Rubin logic formal analysis of SSL protocol

作　　者：李秋山[1] 胡游君[1] 

机构地区：[1]燕山大学信息工程学院计算机系,河北秦皇岛066004

出　　处：《计算机工程与设计》2007年第16期3852-3855,3859,共5页Computer Engineering and Design

摘　　要：SSL协议是一个用于因特网上进行保密通信的实用安全协议,由于它的复杂性,很多形式化分析方法都不适合分析它[1]。而适用于分析非单调密码协议的Rubin逻辑,不同于大多数采用"知识"和"信念"的逻辑分析发现安全缺陷的逻辑分析方法,它完整地分析协议过程中的出现所有"动作",不但能清晰地看到SSL协议的不足,还可指出进一步完善SSL协议的方法。SSL protocol is a practical and security protocol to conduct confidential communication on the Interact. Owing to its complexity, many formal analyses are not appropriate. Whereas, Rubin logic adaptable to analyze nonmonotonic cryptographic protocol, distinguishes itself from the majority of logic analysis model that detect the security deficiency with ＂knowledge＂ and ＂belief＂. It cannot only analyze the overall ＂action＂ and detect the shortage of SSL protocol, but also throw light on the improvement of SSL.

关 键 词：安全协议 Rubm逻辑 SSL协议 形式化分析 非单调密码协议 

分 类 号：TP393.04[自动化与计算机技术—计算机应用技术]