BMC4TimeSec: Verification Of Timed Security Protocols

TL;DR

BMC4TimeSec is a verification tool that uses SMT-based bounded model checking and multi-agent modeling to analyze the security and timing properties of protocols, ensuring their correctness in timed environments.

Contribution

It introduces a novel end-to-end verification framework combining SMT-based bounded model checking with multi-agent timed systems for security protocols.

Findings

Successfully verifies timed security protocols with complex agent interactions.

Provides a publicly available tool and demonstration for practical use.

Enhances the analysis of knowledge evolution in security agents.

Abstract

We present BMC4TimeSec, an end-to-end tool for verifying Timed Security Protocols (TSP) based on SMT-based bounded model checking and multi-agent modelling in the form of Timed Interpreted Systems (TIS) and Timed Interleaved Interpreted Systems (TIIS). In BMC4TimeSec, TSP executions implement the TIS/TIIS environment (join actions, interleaving, delays, lifetimes), and knowledge automata implement the agents (evolution of participant knowledge, including the intruder). The code is publicly available on \href{https://github.com/agazbrzezny/BMC4TimeSec}{GitHub}, as is a \href{https://youtu.be/aNybKz6HwdA}{video} demonstration.