Formal Correctness of Security Protocols

- Introduction

- The Analysis of Security Protocols

- The Inductive Method

- Verifying the Protocol Goals

- The Principle of Goal Availability

- Modelling Timestamping and Verifying a Classical Protocol

- Verifying a Deployed Protocol

- Modelling Agents' Knowledge of Messages

- Verifying Another Deployed Protocol

- Modelling Smartcards

- Verifying a Smartcard Protocol

- Modelling Accountability

- Verifying Two Accountability Protocols

- Conclusions

- Appendices

- References

From the reviews:"This book is about the Inductive Method technique for proving the correctness of security protocols. It is very well suited for the reader who wants to know the state of the art of proving protocol security using the Inductive Method and the interactive theorem prover Isabelle. ... The book could be used as a textbook on the advanced topics in protocol security. It is highly recommended to the newcomer in the field who wants technical information, and to the researcher in the area ... ." (Yongge Wang, Mathematical Reviews, Issue 2008 f)"In summary, my opinion is that this is a great book in the field of computer security, for the practitioner and theoretician alike, since it provides an ideal mixture of theoretical results and applications of them in real protocol analysis scenarios. The book combines, in an ideal way, the features of a rigorous book and a "cookbook". ... In conclusion, I would strongly recommend this book to people involved in formally proving properties about security protocols as well as students making their first steps in studying such protocols." (Yannis C. Stamatiou, Univ. of Ioannina, Greece, ACM SIGACT News Book Review 41(1) 2010)"The book addresses the software development theorists interested in both modelling and automatic verification of security protocols. ... The present text ... includes a valuable contribution devoted to apply the inductive method for verifying properties of real-world communication protocols. ... The interested computer scientist ... find here valuable hints for future important developments in specifying and verifying secure network communication protocols." (Tudor Balanescu, Zentralblatt MATH, Vol. 1176, 2010)