Publikation

WebMC for Browser Based Protocol Verification

Victor Ferman, Dieter Hutter, Raul Monroy

In: Grigori Sidorov, Ulises Cortés (Hrsg.). Computación y Sistemas 21 1 Seiten 101-114 Instituto Politécnico Nacional, Mexico Mexico City 4/2017.

Abstrakt

A browser based protocol is the chief security component of a safety critical web application, such as e-banking. Accordingly, browser based protocols need to be thoroughly verified in order to guarantee they are up to comply with key security properties. To this end, we have developed WebMC, a model checker especially designed to consider web standards, with the aim of analyzing browser based protocol execution, as encompassed by the interactions of a typical user, a browser, and active attacker playing the role of the network, and one or more servers. In this paper, we shall show how to use WebMC in the design and the development of browser based protocols. Our tool has been successfully validated: WebMC has been able to reproduce a number of the verification results found in the literature, but fully automatically.

Projekte

Deutsches Forschungszentrum für Künstliche Intelligenz
German Research Center for Artificial Intelligence