• Title/Summary/Keyword: Formal verification

Search Result 202, Processing Time 0.025 seconds

A Formal Security Analysis on the Enhanced Route Optimization Protocol for Mobile IPv6 (이동 IPv6의 확장된 경로 최적화프로토콜에 대한 형식화된 보안 분석)

  • You, Il-Sun;Kim, Heung-Jun
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.13 no.4
    • /
    • pp.691-699
    • /
    • 2009
  • Recently, the ERO protocol has been adopted as a standard to protect the routing optimization mode introduced by MIPv6. This protocol uses the public key cryptography and the early binding update method to improve the Return Routeability protocol while optimizing both security and performance. On the other hand, though various security approaches including the ERO protocol have been proposed for MIPv6, they lack formal verification. Especially, to our best knowledge, there is no formal analysis on the ERO protocol. In order to provide a good example for formal analysis on MIPv6 security protocols, this paper verifies the correctness of the ERO protocol through BAN-logic. For this goal, BAN-logic is extended to consider the address tests on the mobile nodes's CoA and HoA. It is expected that the analysis presented in this paper will be useful for the formal verifications on the security protocols related to MIPv6.

An Analysis of the Present Condition of Sizing System and Fitting on Formal Pants of the On-line Shopping Mall for Plus-sized Women (플러스사이즈 여성 온라인 의류 쇼핑물의 정장 바지 사이즈 현황 및 맞음새 분석)

  • Ha, Hee-Jung
    • Journal of the Korean Society of Costume
    • /
    • v.58 no.1
    • /
    • pp.133-150
    • /
    • 2008
  • The purpose of this study was to recognize of the sizing system and analyze the fitting on formal pants of the on-line shopping mall for plus-sized women. To pursue this purpose, the investigation of the sizing system was focused on 22 online companies. The formal pants of 7 companies was selected among them. And actual sizes were compared with the guidance sizes of goods. For the assessment about the fitting on formal pants of 7 online companies, these came to make on to 16 obese women with 'A' body shaped and 'O' body shaped. A data analysis used the SPSS 14.0 statistics program. To verify the difference, this study used the variance analysis and Duncan's test for the postmortem verification. The result was as follows. 1. All of 22 companies were using the symbol such as 88, 99, 100 and 110 in the present condition of sizing system. The information about products size was presenting the products size not to be the body size. the guidance sizes of products were different from actual sizes of 7 companies to be assorted. Therefore, the guidance sizes of goods could not accomplish the facility. 2. According to the fitting-tests by the sensory assessment, the obese women with 'A' body shaped, did the dissatisfaction at the items of the hip circumference, abdominal region, crotch deep and pants length. The obese women with 'O' body shaped, did the dissatisfaction at the the items of crotch deep and pants length.

Formal Methodology for Safety Analysis of Security Protocols (보안 프로토콜의 안전성 분석을 위한 정형적 방법론)

  • Kim Il-Gon;Jeon Chul-Wuk;Kim Hyun-Seok;Choi Jin-Young;Kang In-Hye
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.15 no.1
    • /
    • pp.17-27
    • /
    • 2005
  • With the development of wire and wireless based networks, a various security protocols have been proposed to protect important resources and user information against attackers. However, many security protocols have found oかy to be later vulnerable to attacks. In this Paper, we introduce the formal methodology to verify the safety of security protocols in the design phase, and we take advantage of the formal methodology which uses Casper/CSP and FDR tools by introducing the verification example of EKE protocol and BCY protocol. Lastly, we propose a new BCY protocol after verifying it's safety.

Requirement Verification to Improve Reliability of the Requirement Specification in Object-Oriented Software Development (객체 지향 소프트웨어 개발에서 요구 사양의 신뢰성을 향상시키기 위한 요구 검증)

  • 정안나;염근현
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 1998.10b
    • /
    • pp.579-581
    • /
    • 1998
  • 소프트웨어 개발에서 나타나는 많은 오류는 요구 사항에 대한 정확한 이해의 부족에서 기인된다. 따라서 분석 단계에서 요구사항을 정확하게 나타내는 활동은 전체 소프트웨어의 신뢰성에 큰 영향을 미치게 된다. 요구 검증은 요구 분석 활동에서 산출되는 정보가 요구 문서의 정보를 바르게 나타내는가를 검증하는 활동이다. 본 연구에서는 객체 지향 소프트웨어의 개발에서 요구 검증을 수행하기 위해 OFL(Object-oriented Formal Language)과 질의 추출을 적용하였다. OFL은 객체 지향 형식 상태변이사항(Formal state transition specification)으로 형식 언어가 기자고 있는 명확성을 유지하며 분석 활동의 결과를 체계적으로 제시한다. 이러한 결과와 요구 문서와의 비교를 위하여 질의 추출이 수행된다. 이는 질의를 통하여 요구 문서에서는 나타나는 정보를 체계적으로 정리하여 개발 의뢰자가 제시한 요구 사항과 개발자가 제시하는 요구 사양간에 일치성과 완전성이 존재함을 검증한다. 이러한 요구 검증은 요구 사양의 신뢰성뿐만 아니라 개발되는 소프트웨어의 신뢰성을 향상시킨다.

An analysis scheme for protocols specified in SDL using reachability graph (도달성 그래프를 이용한 SDL 표현 프로토콜 분석 기법)

  • 김환철
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.21 no.12
    • /
    • pp.3109-3120
    • /
    • 1996
  • SDL has been standardized to specify behavioral aspects of communication systems based on the formal description technique, and it is powerful and user friendly in the sense of supporting human communication and understanding, formal analysis andcomparison of behaviors, alternative implementations and design optimization, and its structural decomposition. However, SDL is not sufficient for an efficient handing of entrire system descriptions because the communication systems are generally very complex, and composed from the various interactions among sub-systems. Also, it is very difficult to explicitly verify dynamic views such as liveness and reachability. it leads the demands on analysis scheme to verify dynamic behaviros of specified systems. This paper presents modeling concepts of Petri Nets from SDL and transformation rules to Numerical Petri Nets to provide efficient technqiques for verification of dynamic behaviors, and proposes the reachability garaph that is able to trace all reachable states of a modeled system and reduce an information loss on the reachability tree.

  • PDF

Specification and Verification of Crisis Response Manual using Formal Methods (정형기법을 적용한 위기대응 실무매뉴얼 명세 및 검증)

  • Jeong, Kum-Taek;Lee, Jin-Ho;Seo, Suk;Choi, Jin-Young
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2010.06b
    • /
    • pp.116-119
    • /
    • 2010
  • 안보, 재난, 국가핵심기반 분야에 위기발생시 즉각적인 조치를 위한 '위기대응 실무매뉴얼'이 정부기관별로 작성되어 있지만 조치사항에 대한 정량적 검증이 부족하다. 오류가 내포된 조치절차는 피해를 확대 시킬 수 있으므로 위기대응절차에 대한 검증이 요구되며 이를 위해 본 논문에서는 Statemate의 구조적, 기능적, 행위적 관점의 언어를 활용해서 정형기법(formal methods)을 수행함으로써 위기 대응 실무매뉴얼의 모델링 방법을 제안하고 매뉴얼에 기술되어 있는 조치절차의 검증결과를 제시하였다.

  • PDF

Software Formal Verification Methodology using Aspect DEVS Verification Framework (Aspect DEVS 검증 틀을 이용한 소프트웨어 정형 검증 방법론)

  • Choi, Chang-Beom;Kim, Tag-Gon
    • Journal of the Korea Society for Simulation
    • /
    • v.18 no.3
    • /
    • pp.113-122
    • /
    • 2009
  • Software is getting more complex due to a variety of requirements that include desired functions and properties. Therefore, verifying and testing the software are complicated problems. Moreover, if the software is already implemented, inserting and deleting tracing/logging code into the source code may cause several problems, such as the code tangling and the code scattering problems. This paper proposes the Aspect DEVS Verification Framework which supports the verification and testing process. The Aspect DEVS Verification Framework utilizes Aspect Oriented Programming features to handle the code tangling and the code scattering problems. By applying aspect oriented features, a user can find and fix the inconsistency between requirement and implementation of a software without suffering the problems. The first step of the verification process is the building aspect code to make a software act as a generator. The second step is developing a requirement specification using DEVS diagrams and implementing it using the DEVSIM++. The final step is comparing the event traces from the software with the possible execution sequences from DEVS model.

A Proposal for Component Formal Specification Activities Using Z (Z를 이용한 컴포넌트 정형 명세 활동의 제안)

  • 장종표;이상준;김병기
    • The KIPS Transactions:PartD
    • /
    • v.8D no.1
    • /
    • pp.99-104
    • /
    • 2001
  • As a plan to counteract solving software crisis, the technology that is called Component Based Software Engineering (CBSE or Componentware) is introsuced. Component Based Software Developement (CBSD) Processes as one of the technique among CBSE have been proposed. Component specification activities among CBSD Processed are necessary and important for generating feusable component. However, the existing CBSD processed can't ensure the correctness in requirements are reflected. In this paper, we propose that formal activities wgich specify component using formal specification language Z which is verified with the ability of analysis and logicality. The proposed activities are composed of 5 tasks and 12 subtasks. By presenting specific 19 products, it is also proposed that component specification activities which are the base of CBSD for reusing. The proposed activities are able to improve qualities of component through correctness and verification of requirements specification of users in the early step of component-based software process.

  • PDF

Formal Verification of AES Encryption Module Using CBMC (CBMC를 이용한 AES 암호화 모듈의 정형 검증)

  • Ahn Young-Jung;Choi Jin-Young
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2005.11a
    • /
    • pp.97-99
    • /
    • 2005
  • 정보보호 제품의 주요한 역할을 담당하는 암호 모듈의 구현 무결성을 보증하기 위해 많은 연구가 활발히 이루어지고 있다. 하지만 기존의 일반적인 테스팅 방법으로는 구현 무결성에 대해 신뢰하지 못한다. 본 논문에서는 NIST (the US National Institute of Science and Technology)에서 AES(Advanced Encryption Standard)로 제정된 Rijndael 블록암호 모듈을 Verilog로 구현하고 CBMC를 이용하여 새로운 방식의 구현 무결성 평가 방법을 제시하고자 한다.

  • PDF

The Study of Formal Verification using Esterel for Network Protocol (통신 프로토콜 검증을 위한 Esterel 정형검증 연구)

  • 김성재;김진현;최진영
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2002.04a
    • /
    • pp.535-537
    • /
    • 2002
  • 인터넷의 확산과 네트워크 기술의 발전에 따라 네트워크 메커니즘은 그 설계 및 이해가 더욱 복잡해져 가고 있고, 분산 시스템 환경에서의 역할과 중요성도 날로 더해져 가고 있다. 본 논문에서는 네트워크 메커니즘의 정확성 검증을 위한 정형검증 연구의 일환으로, Reactive system의 모델링 및 검증을 위해 개발된 정형검증 언어인 Esterel을 이용한 Abracadabra 프로토콜의 정형 검증을 통해, 통신 프로토콜에 대한 Esterel의 정형검증 능력을 분석하고 좀더 복잡한 통신 프로토콜에 대한 정형 검증의 적용 가능성을 타진하고자 한다.

  • PDF