Runtime verification for trustworthy secure shell deployment
Open Access
- 11 July 2021
- conference paper
- Published by Association for Computing Machinery (ACM)
- p. 30-34
Abstract
Incorrect cryptographic protocol implementation and malware attacks targeting its runtime may lead to insecure execution even if the protocol design has been proven safe. This research focuses on adapting a runtime-verification-centric trusted execution environment (RV-TEE) solution to a cryptographic protocol deployment --- particularly that of the Secure Shell Protocol (SSH). We aim to show that our approach, which does not require any specific security hardware or operating system modifications, is feasible through the design of a framework and work-in-progress empirical evaluation. We provide: (i) The design of the setup involving SSH, (ii) The provision of the RV-TEE setup with SSH implementation, including (iii) An overview of the property extraction process through a methodical analysis of the SSH protocol specifications.Keywords
Funding Information
- NATO Science for Peace and Security Programme (G5448)
This publication has 14 references indexed in Scilit:
- Demystifying Arm TrustZoneACM Computing Surveys, 2019
- Industrial Experiences with Runtime Verification of Financial Transaction Systems: Lessons Learnt and Standing Challenges2018
- Introduction to Runtime Verification2018
- Defensing the malicious attacks of vehicular network in runtime verification perspective2016
- Intel® Software Guard Extensions (Intel® SGX) Support for Dynamic Memory Management Inside an Enclave2016
- Trusted Execution Environment: What It is, and What It is Not2015
- The TAMARIN Prover for the Symbolic Analysis of Security Protocols2013
- Safer asynchronous runtime monitoring using compensationsFormal Methods in System Design, 2012
- Runtime verification of cryptographic protocolsComputers & Security, 2009
- LARVA --- Safer Monitoring of Real-Time Java Programs (Tool Paper)2009