Abstract-We embed an operational semantics for security protocols in the interactive theorem prover Isabelle/HOL and derive two strong protocol-independent invariants. These invariants allow us to reason about the possible origin of messages and justify a local typing assumption for the otherwise untyped protocol variables. The two rules form the core of a theory that is well-suited for interactively constructing natural, human-readable, correctness proofs. Moreover, we develop an algorithm that automatically generates proof scripts based on these invariants. Both interactive and automatic proof construction are faster than competing approaches. Moreover, we have strong correctness guarantees since all proofs, including those deriving the underlying theory from the semantics, are machine checked.
The latter REF also used Isabelle but two strong protocol-independent invariants have been derived from an operational semantics of the protocols.
Strong Invariants for the Efficient Construction of Machine-Checked Protocol Security Proofs
2010 23rd IEEE Computer Security Foundations Symposium
2010 23rd IEEE Computer Security Foundations Symposium
Computer Science