| 注册
首页|期刊导航|计算机技术与发展|协议分析的模型检测工具比较研究

协议分析的模型检测工具比较研究

陈琼 缪祥华 袁梅宇

计算机技术与发展2026,Vol.36Issue(1):202-211,10.
计算机技术与发展2026,Vol.36Issue(1):202-211,10.DOI:10.20165/j.cnki.ISSN1673-629X.2025.0200

协议分析的模型检测工具比较研究

A Comparative Study of Model Detection Tools for Protocol Analysis

陈琼 1缪祥华 2袁梅宇1

作者信息

  • 1. 昆明理工大学 信息工程与自动化学院,云南 昆明 650500
  • 2. 昆明理工大学 信息工程与自动化学院,云南 昆明 650500||云南省计算机技术应用重点实验室,云南 昆明 650500
  • 折叠

摘要

Abstract

With the rapid development of the Internet,security issues have become more and more prominent.To ensure network security,rigorous security validation of the protocol is essential.Model detection technology is a verification method based on formal methods,which can accurately identify potential vulnerabilities by traversing the protocol execution path,and has been widely used in cryptography,blockchain,Internet of Things and other fields in recent years.Three mainstream model detection tools,Scyther,ProVerif,and Tamarin,are compared and analyzed,and their advantages and disadvantages in security protocol verification are analyzed.Scyther focuses on validating role-based protocols,supports multiple security attribute analysis,attack path visualization,and multi-protocol parallel analysis,which is fast in validation,but requires manual configuration of parameters,and has limited ability to handle complex protocols.ProVerif is suitable for analyzing complex protocols,has strong automated verification capabilities,and can efficiently handle unlimited sessions,but lacks a graphical interface and has limited support for complex cryptographic primitives.Tamarin supports richer protocol models and security attribute verification,which can generate attack trajectories,but it has the problems of long verification time,high resource occupation,and state space explosion.Through comparative analysis,it aims to provide a reference for researchers to choose appropriate tools and provide directions for further improvement of model detection tools.

关键词

模型检测技术/形式化分析/协议分析/Scyther/ProVerif/Tamarin

Key words

model detection technology/formal analysis/protocol analysis/Scyther/ProVerif/Tamarin

分类

信息技术与安全科学

引用本文复制引用

陈琼,缪祥华,袁梅宇..协议分析的模型检测工具比较研究[J].计算机技术与发展,2026,36(1):202-211,10.

基金项目

云南省重大专项计划(202302AD080002) (202302AD080002)

云南省高层次科技人才及创新团队选拨专项(202405AS350001) (202405AS350001)

计算机技术与发展

1673-629X

访问量0
|
下载量0
段落导航相关论文