A Modeling Framework for Generating Security Protocol Specifications

TL;DR

This paper introduces a novel modeling framework that combines sequential and semantic components to generate security protocol specifications, validated on multiple real-world protocols.

Contribution

It presents a new approach integrating WSDL-S and OWL to automatically generate security protocol specifications with semantic understanding.

Findings

Successfully modeled 13 security protocols including ISO9798 and Kerberos.

Demonstrated the framework's ability to capture protocol properties and semantics.

Validated the approach's effectiveness on real-world protocols.

Abstract

We propose a modeling framework for generating security protocol specifications. The generated protocol specifications rely on the use of a sequential and a semantical component. The first component defines protocol properties such as preconditions, effects, message sequences and it is developed as a WSDL-S specification. The second component defines the semantic aspects corresponding to the messages included in the first component by the use of ontological constructions and it is developed as an OWL-based specification. Our approach was validated on 13 protocols from which we mention: the ISO9798 protocol, the CCITTX.509 data transfer protocol and the Kerberos symmetric key protocol.