2002 · 15 citations · 7 references
ComputingComputer EngineeringComputer ScienceComputer SecurityCryptographyFormal MethodsAccess ControlAuthentication ProtocolsDeductive VerificationSecure System DesignVerificationFormal Methods For SecurityFormal Security VerificationFormal Verification Of Cryptographic ProtocolsFormal Verification Of Security PropertiesFormal Verification Tools For Cryptographic ProtocolsMessage AuthenticationMessage Authentication ProtocolsMessage Authentication Verification
A description is given of the application of formal specification and verification methods to two microprocessor-based cryptographic devices: a 'smart token' system that controls access to a network of workstations, and a message authentication device implementing the ANSI X9.9 message authentication standard. Formal specification and verification were found to be practical, cost-effective tools for detecting potential security weaknesses, and helped to significantly strengthen the security of the access control system.< <ETX xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">></ETX>
7
Non-Discretionery Controls for Commercial Applications
Steven B. Lipner · 1982 · 99 citations
The RAISE language, method and tools
Mogens Nielsen, Klaus Havelund, Kim Ritter Wagner et al. · Formal Aspects of Computing · 1989 · 62 citations