Search

Automated verification of privacy-type properties for security protocols

March 16, 2018
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : Ivan Gazeau (LORIA, Inria Nancy)

The applied pi-calculus is a powerful framework to model protocols and to define security properties. In this symbolic model, it is possible to verify automatically complex security properties such as strong secrecy, anonymity and unlinkability properties which are based on equivalence of processes.In this talk, we will see an overview of a verification method used by a tool, Akiss. The tool is[…]

A Compositional and Complete approach to Verifying Privacy Properties using the Applied Pi-calculus

February 08, 2019
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : Ross Horne (University of Luxembourg)

The pi-calculus was introduced for verifying cryptographic protocols by Abadi and Fournet in 2001. They proposed an equivalence technique, called bisimilarity, useful for verify privacy properties. It is widely acknowledged (cf. Paige and Tarjan 1987), that bisimilarity is more efficient to check than trace equivalence; however, surprisingly, tools based on the applied pi-calculus typically still[…]

How to decrypt without keys with GlobalPlatform SCP02 protocol

July 06, 2018
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : par Loic Ferreira (Orange Labs, IRISA)

The GlobalPlatform SCP02 protocol is a security protocol implemented in smart cards, and used by transport companies, in the banking world and by mobile network operators (UICC/SIM cards). We describe how to perform a padding oracle attack against SCP02. The attack allows an adversary to efficiently retrieve plaintext bytes from an encrypted data field. We provide results of our experiments done[…]

Breaking and fixing HB+DB: A Short Tale of Provable vs Experimental Security and Lightweight Designs

February 02, 2018
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : Ioana Boureanu (University of Surrey)

HB+ is a well-know authentication scheme purposely designed to be lightweight. However, HB+ is vulnerable to a key-recovery, man-in-the-middle (MiM) attack dubbed GRS. To this end, at WiSec2015, the HB+DB protocol added a distance-bounding dimension to HB+, which was experimentally shown to counteract the GRS attack.In this talk, we will exhibit however a number of security flaws in the HB+DB[…]

Reasoning over leaks of information for Access Control of Databases

October 13, 2022
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : Pierre Bourhis (CNRS, CRISTAL)

Controlling the access of data in Database management systems is a classical problem and it has been solved through different mechanisms. One of the most common mechanism implemented in most Database management systems is the mechanism of views, i.e defining the accessible data of a user as the result of a query. This mechanism is also used in principle in other systems such as in social networks.[…]

Les cyberopérations: entre technique et droit international. Attribution, preuve et responsabilité.

April 02, 2021
Inria Center of the University of Rennes - - See the page of each talk for the room.

Speaker : Anne-Thida Norodom (Professeur de droit public, Université de Paris)

L’objet de cette intervention est de montrer à quel point le juridique est dépendant du technique lorsqu’il s’agit de réguler les cyberopérations. L’approche choisie sera celle du droit international public, c’est-à-dire du droit applicable entre Etats. Alors qu’il existe un consensus au niveau international sur l’applicabilité du droit international dans le domaine numérique, les négociations en[…]

760 results