Automatic Vulnerability Checking of IEEE 802.16 WiMAX Protocols through TLA+

Prasad Narayana, Ruiming Chen, Yao Zhao, Yan Chen, Zhi Fu, Hai Zhou
<span title="">2006</span> <i title="IEEE"> 2006 2nd IEEE Workshop on Secure Network Protocols </i> &nbsp;
Vulnerability analysis is indispensably the first step towards securing a network protocol, but currently remains mostly a best effort manual process with no completeness guarantee. Formal methods are proposed for vulnerability analysis and most existing work focus on security properties such as perfect forwarding secrecy and correctness of authentication. However, it remains unclear how to apply these methods to analyze more subtle vulnerabilities such as denial-of-service (DoS) attacks. To
more &raquo; ... ress this challenge, in this paper, we propose use of TLA+ to automatically check DoS vulnerability of network protocols with completeness guarantee. In particular, we develop new schemes to avoid state space explosion in property checking and to model attackers' capabilities for finding realistic attacks. As a case study, we successfully identify threats to IEEE 802.16 air interface protocols.
<span class="external-identifiers"> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1109/npsec.2006.320346">doi:10.1109/npsec.2006.320346</a> <a target="_blank" rel="external noopener" href="https://fatcat.wiki/release/akvfbhh7vbfgpm242fxuprmh5a">fatcat:akvfbhh7vbfgpm242fxuprmh5a</a> </span>
<a target="_blank" rel="noopener" href="https://web.archive.org/web/20060913212523/http://www.cs.northwestern.edu/%7Eychen/Papers/npsec06.pdf" title="fulltext PDF download" data-goatcounter-click="serp-fulltext" data-goatcounter-title="serp-fulltext"> <button class="ui simple right pointing dropdown compact black labeled icon button serp-button"> <i class="icon ia-icon"></i> Web Archive [PDF] <div class="menu fulltext-thumbnail"> <img src="https://blobs.fatcat.wiki/thumbnail/pdf/db/5e/db5e20c8e25d49f2b52b5b21bda621e075705297.180px.jpg" alt="fulltext thumbnail" loading="lazy"> </div> </button> </a> <a target="_blank" rel="external noopener noreferrer" href="https://doi.org/10.1109/npsec.2006.320346"> <button class="ui left aligned compact blue labeled icon button serp-button"> <i class="external alternate icon"></i> ieee.com </button> </a>