On the security verification of a short message service protocol

Anca Delia Jurcut, Madhusanka Liyanage, Jinyong Chen, Cornelia Gyorodi, Jingsha He
2018 2018 IEEE Wireless Communications and Networking Conference (WCNC)  
Short Message Service (SMS) is a text messaging service component of smart phones, web, or mobile communication systems which requires a high level of security to provide user authentication and data confidentiality. To provide such security features, a high security communication protocol for SMS, called Message Security Communication Protocol (MSCP) was proposed. In this paper, MSCP is formally analyzed using an automated logic-based verification tool with attack detection capabilities. The
more » ... capabilities. The performed formal verification reveals that the proposed protocol is susceptible to parallel session and denial-ofservice (DoS) attacks. The reasoning why these attacks are possible is detailed and an amended protocol is proposed to counter the identified attacks. Formal verification of the amended protocol provides confidence regarding the correctness and effectiveness of the proposed modifications.
doi:10.1109/wcnc.2018.8377349 dblp:conf/wcnc/JurcutLCGH18 fatcat:5jwbhfjuwvg3ljktlzuyym4w7e