Detail výsledku

Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding

HENZL, M.; HANÁČEK, P. Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding. 2013 International Symposium on Biometrics and Security Technologies (ISBAST). Chengdu: IEEE Computer Society, 2013. p. 141-148. ISBN: 978-0-7695-5010-7.
Typ
článek ve sborníku konference
Jazyk
anglicky
Autoři
Henzl Martin, Ing. Mgr., Ph.D., UITS (FIT)
Hanáček Petr, doc. Dr. Ing., UITS (FIT)
Abstrakt
We present a method of automated vulnerability finding in protocols that use contactless smart cards. We focus on smart cards with contactless interface because they are simpler than their counterparts with contact interface and provide less functionality, which can be modeled more easily. Our method uses model checking to find possible attacks in a model of the protocol implementation on particular smart card. There is a possibility to model arbitrary smart card, we demonstrate this method on one of the currently most widespread contactless smart cards - the Mifare DESFire. Using our method we were able to locate a couple of weaknesses of this smart card which may cause vulnerability if the protocol is not implemented properly. This method can be used by developers to evaluate security of their protocol implementation on particular smart card.
Klíčová slova
contactless smart card, security, vulnerability, model, Mifare DESFire
Rok
2013
Strany
141–148
Sborník
2013 International Symposium on Biometrics and Security Technologies (ISBAST)
Konference
International Symposium on Biometrics and Security Technologies
ISBN
978-0-7695-5010-7
Vydavatel
IEEE Computer Society
Místo
Chengdu
BibTeX 
@inproceedings{BUT104512,
  author="Martin {Henzl} and Petr {Hanáček}",
  title="Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding",
  booktitle="2013 International Symposium on Biometrics and Security Technologies (ISBAST)",
  year="2013",
  pages="141--148",
  publisher="IEEE Computer Society",
  address="Chengdu",
  isbn="978-0-7695-5010-7"
}
Projekty
Centrum excelence IT4Innovations, MŠMT, Operační program Výzkum a vývoj pro inovace, ED1.1.00/02.0070, zahájení: 2011-01-01, ukončení: 2015-12-31, ukončen
Pokročilé bezpečné, spolehlivé a adaptivní IT, VUT, Vnitřní projekty VUT, FIT-S-11-1, zahájení: 2011-01-01, ukončení: 2013-12-31, ukončen
Výzkum informačních technologií z hlediska bezpečnosti, MŠMT, Institucionální prostředky SR ČR (např. VZ, VC), MSM0021630528, zahájení: 2007-01-01, ukončení: 2013-12-31, řešení
Výzkumné skupiny
Výzkumná skupina bezpečnosti informačních technologií (VZ Security@FIT)
Pracoviště
Ústav inteligentních systémů (UITS)
Nahoru