Principles of Security and Trust: 6th International Conference, POST 2017, Held as Part of the European Joint Conferences on Theory and Practice of Software, ETAPS 2017, Uppsala, Sweden, April 22-29, 2017, Proceedings

327 Pages·2017·16.9 MB·English

by  Matteo Maffei

Matteo Maffei
Mark Ryan (Eds.)
S
S
o
C
R
A
4
0
2 Principles of Security
0
1

S
C and Trust
N
L
6th International Conference, POST 2017
Held as Part of the European Joint Conferences
on Theory and Practice of Software, ETAPS 2017
Uppsala, Sweden, April 22–29, 2017, Proceedings
123
Lecture Notes in Computer Science 10204
Commenced Publication in 1973
Founding and Former Series Editors:
Gerhard Goos, Juris Hartmanis, and Jan van Leeuwen
Editorial Board
David Hutchison, UK Takeo Kanade, USA
Josef Kittler, UK Jon M. Kleinberg, USA
Friedemann Mattern, Switzerland John C. Mitchell, USA
Moni Naor, Israel C. Pandu Rangan, India
Bernhard Steffen, Germany Demetri Terzopoulos, USA
Doug Tygar, USA Gerhard Weikum, Germany
Advanced Research in Computing and Software Science
Subline of Lecture Notes in Computer Science
Subline Series Editors
Giorgio Ausiello, University of Rome ‘La Sapienza’, Italy
Vladimiro Sassone, University of Southampton, UK
Subline Advisory Board
Susanne Albers, TU Munich, Germany
Benjamin C. Pierce, University of Pennsylvania, USA
Bernhard Steffen, University of Dortmund, Germany
Deng Xiaotie, City University of Hong Kong
Jeannette M. Wing, Microsoft Research, Redmond, WA, USA
More information about this series at http://www.springer.com/series/7410
Matteo Maffei Mark Ryan (Eds.)
(cid:129)
Principles of Security
and Trust
6th International Conference, POST 2017
Held as Part of the European Joint Conferences
on Theory and Practice of Software, ETAPS 2017
–
Uppsala, Sweden, April 22 29, 2017
Proceedings
123
Editors
Matteo Maffei Mark Ryan
Saarland University University of Birmingham
Saarbrücken Birmingham
Germany UK
ISSN 0302-9743 ISSN 1611-3349 (electronic)
Lecture Notesin Computer Science
ISBN 978-3-662-54454-9 ISBN978-3-662-54455-6 (eBook)
DOI 10.1007/978-3-662-54455-6
LibraryofCongressControlNumber:2017933540
LNCSSublibrary:SL4–SecurityandCryptology
©Springer-VerlagGmbHGermany2017
Thisworkissubjecttocopyright.AllrightsarereservedbythePublisher,whetherthewholeorpartofthe
material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation,
broadcasting, reproduction on microfilms or in any other physical way, and transmission or information
storageandretrieval,electronicadaptation,computersoftware,orbysimilarordissimilarmethodologynow
knownorhereafterdeveloped.
Theuseofgeneraldescriptivenames,registerednames,trademarks,servicemarks,etc.inthispublication
doesnotimply,evenintheabsenceofaspecificstatement,thatsuchnamesareexemptfromtherelevant
protectivelawsandregulationsandthereforefreeforgeneraluse.
Thepublisher,theauthorsandtheeditorsaresafetoassumethattheadviceandinformationinthisbookare
believedtobetrueandaccurateatthedateofpublication.Neitherthepublishernortheauthorsortheeditors
give a warranty, express or implied, with respect to the material contained herein or for any errors or
omissionsthatmayhavebeenmade.Thepublisherremainsneutralwithregardtojurisdictionalclaimsin
publishedmapsandinstitutionalaffiliations.
Printedonacid-freepaper
ThisSpringerimprintispublishedbySpringerNature
TheregisteredcompanyisSpringer-VerlagGmbHGermany
Theregisteredcompanyaddressis:HeidelbergerPlatz3,14197Berlin,Germany
ETAPS Foreword
Welcome to the proceedings of ETAPS 2017, which was held in Uppsala! It was the
first time ever that ETAPS took place in Scandinavia.
ETAPS 2017 was the 20th instance of the European Joint Conferences on Theory
and Practice of Software. ETAPS is an annual federated conference established in
1998, and consists offive conferences: ESOP, FASE, FoSSaCS, TACAS, and POST.
Each conference has its own Program Committee (PC) and its own Steering Com-
mittee. The conferences cover various aspects of software systems, ranging from
theoretical computer science to foundations to programming language developments,
analysis tools, formal approaches to software engineering, and security. Organizing
these conferences in a coherent, highly synchronized conference program enables
participation in an exciting event, offering the possibility to meet many researchers
working in different directions in the field and to easily attend talks of different con-
ferences. Before and after the main conference, numerous satellite workshops take
place and attract many researchers from all over the globe.
ETAPS 2017 received 531 submissions in total, 159 of which were accepted,
yielding an overall acceptance rate of 30%. I thank all authors for their interest in
ETAPS, all reviewers for their peer reviewing efforts, the PC members for their con-
tributions,andinparticularthePC(co-)chairsfortheirhardworkinrunningthisentire
intensive process. Last but not least, my congratulations to all authors of the accepted
papers!
ETAPS 2017 was enriched by the unifying invited speakers Kim G. Larsen (Aal-
borg University, Denmark) and Michael Ernst (University of Washington, USA), as
wellastheconference-specificinvitedspeakers(FoSSaCS)JoelOuaknine(MPI-SWS,
Germany,andUniversityofOxford,UK)and(TACAS)DinoDistefano(Facebookand
Queen Mary University of London, UK). In addition, ETAPS 2017 featured a public
lecture by Serge Abiteboul (Inria and ENS Cachan, France). Invited tutorials were
offered by Véronique Cortier (CNRS research director at Loria, Nancy, France) on
security and Ken McMillan (Microsoft Research Redmond, USA) on compositional
testing.Mysincerethankstoallthesespeakersfortheirinspiringandinterestingtalks!
ETAPS2017tookplaceinUppsala,Sweden,andwasorganizedbytheDepartment
of Information Technology of Uppsala University. It was further supported by the
following associations and societies: ETAPS e.V., EATCS (European Association for
Theoretical Computer Science), EAPLS (European Association for Programming
LanguagesandSystems),andEASST(EuropeanAssociationofSoftwareScienceand
Technology). Facebook, Microsoft, Amazon, and the city of Uppsala financially sup-
ported ETAPS 2017. The local organization team consisted of Parosh Aziz Abdulla
(generalchair),WangYi,BjörnVictor,KonstantinosSagonas,MohamedFaouziAtig,
Andreina Francisco, Kaj Lampka, Tjark Weber, Yunyun Zhu, and Philipp Rümmer.
The overall planning for ETAPS is the main responsibility of the Steering Com-
mittee, and in particular of its executive board. The ETAPS Steering Committee
VI ETAPSForeword
consists of an executive board, and representatives of the individual ETAPS confer-
ences,aswellasrepresentativesofEATCS,EAPLS,andEASST.Theexecutiveboard
consists of Gilles Barthe (Madrid), Holger Hermanns (Saarbrücken), Joost-Pieter
Katoen (chair, Aachen and Twente), Gerald Lüttgen (Bamberg), Vladimiro Sassone
(Southampton),TarmoUustalu(Tallinn),andLenoreZuck(Chicago).Othermembers
of the Steering Committee are: Parosh Abdulla (Uppsala), Amal Ahmed (Boston),
Christel Baier (Dresden), David Basin (Zurich), Lujo Bauer (Pittsburgh), Dirk Beyer
(Munich), Giuseppe Castagna (Paris), Tom Crick (Cardiff), Javier Esparza (Munich),
Jan Friso Groote (Eindhoven), Jurriaan Hage (Utrecht), Reiko Heckel (Leicester),
Marieke Huisman (Twente), Panagotios Katsaros (Thessaloniki), Ralf Küsters (Trier),
Ugo del Lago (Bologna), Kim G. Larsen (Aalborg), Axel Legay (Rennes), Matteo
Maffei (Saarbrücken), Tiziana Margaria (Limerick), Andrzej Murawski (Warwick),
Catuscia Palamidessi (Palaiseau), Julia Rubin (Vancouver), Alessandra Russo
(London), Mark Ryan (Birmingham), Don Sannella (Edinburgh), Andy Schürr
(Darmstadt), Gabriele Taentzer (Marburg), Igor Walukiewicz (Bordeaux), and Hon-
gseok Yang (Oxford).
I would like to take this opportunity to thank all speakers, attendees, organizers
of the satellite workshops, and Springer for their support. Finally, a big thanks to
Paroshandhislocalorganizationteamforalltheirenormouseffortsenablingafantastic
ETAPS in Uppsala!
January 2017 Joost-Pieter Katoen
Preface
This volume contains the papers presented at POST 2017, the 6th Conference on
Principles of Security and Trust, held April 24–25, 2017, in Uppsala, Sweden, as part
of ETAPS. Principles of Security and Trust is a broad forum related to the theoretical
and foundational aspects of security and trust, and thus welcomes papers of many
kinds:newtheoreticalresults,practicalapplicationsofexistingfoundationalideas,and
innovative theoretical approaches stimulated by pressing practical problems.
POST was created in 2012 to combine and replace a number of successful and
long-standing workshops in this area: Automated Reasoning and Security Protocol
Analysis (ARSPA), Formal Aspects of Security and Trust (FAST), Security in Con-
currency (SecCo), and the Workshop on Issues in the Theory of Security (WITS).
Asubsetoftheseeventsmetjointlyasaneventaffiliated with ETAPS2011underthe
name “Theory of Security and Applications” (TOSCA).
POST 2017 invited “systematization of knowledge” (SoK) papers, which are
expected to evaluate, systematize, and contextualize existing knowledge. The call for
papers sought work that provides an important new viewpoint on established research
areas, challenges long-held beliefs in such an area with compelling evidence, or pre-
sents a comprehensive new taxonomy of such an area. There were 40 submissions to
POST2017,ofwhichtwowereSoKpapers.Eachsubmissionwasreviewedbyatleast
three Program Committee members, who in some cases solicited the help of outside
expertstoreviewthepapers.Electronicdiscussionwasusedtodecidewhichpapersto
selectfortheprogram.Thecommitteedecidedtoaccept14papers,includingoneSoK
paper.Wewouldliketothank themembersoftheProgram Committee,theadditional
reviewers, the POST Steering Committee, the ETAPS Steering Committee, and the
local Organizing Committee, who all contributed to the success of POST 2017. We
also thank all authors of submitted papers for their interest in POST and congratulate
the authors of accepted papers. Finally, we acknowledge the use of EasyChair for
organizingthesubmissionprocess,theProgramCommittee’swork,andthepreparation
of this volume.
January 2017 Matteo Maffei
Mark D. Ryan
Organization
Program Committee
Myrto Arapinis University of Birmingham, UK
Stefano Calzavara Università Ca’ Foscari Venezia, Italy
Konstantinos Ecole Polytechnique of Paris, France
Chatzikokolakis
Stephen Chong Harvard University, USA
Jeremy Clark Concordia University, Canada
Cas Cremers University of Oxford, UK
Stephanie Delaune CNRS, IRISA, France
Matt Fredrikson Carnegie Mellon University, USA
Marco Gaboardi University at Buffalo, SUNY, USA
David Galindo University of Birmingham, UK
Deepak Garg Max Planck Institute for Software Systems, Germany
Dieter Gollmann Hamburg University of Technology, Germany
Catalin Hritcu Inria Paris, France
Limin Jia Carnegie Mellon University, USA
Aniket Kate MMCI, Saarland University, Germany
Boris Köpf IMDEA Software Institute
Matteo Maffei CISPA, Saarland University, Germany
Mark Manulis University of Surrey, UK
Catherine Meadows NRL
Frank Piessens Katholieke Universiteit Leuven, Belgium
Alejandro Russo Chalmers University of Technology, Sweden
Mark Ryan University of Birmingham, UK
Geoffrey Smith Florida International University, USA
Ben Smyth Huawei
Luca Viganò King’s College London, UK
Bogdan Warinschi University of Bristol, UK
Additional Reviewers
Audinot, Maxime Morisset, Charles Van Bulck, Jo
Cheval, Vincent Oswald, David Vassena, Marco
Chimento, Mauricio Palamidessi, Catuscia Vivek, Srinivas
Mannan, Mohammad Schoepe, Daniel Zavatteri, Matteo
Contents
Information Flow
Timing-Sensitive Noninterference through Composition. . . . . . . . . . . . . . . . 3
Willard Rafnsson, Limin Jia, and Lujo Bauer
Quantifying Vulnerability of Secret Generation Using Hyper-Distributions. . . 26
Mário S. Alvim, Piotr Mardziel, and Michael Hicks
A Principled Approach to Tracking Information Flow in the Presence
of Libraries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Daniel Hedin, Alexander Sjösten, Frank Piessens, and Andrei Sabelfeld
Secure Multi-party Computation: Information Flow of Outputs
and Game Theory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Patrick Ah-Fat and Michael Huth
Security Protocols
Automated Verification of Dynamic Root of Trust Protocols . . . . . . . . . . . . 95
Sergiu Bursuc, Christian Johansen, and Shiwei Xu
Beyond Subterm-Convergent Equational Theories in Automated
Verification of Stateful Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Jannik Dreier, Charles Duménil, Steve Kremer, and Ralf Sasse
On Communication Models When Verifying Equivalence Properties. . . . . . . 141
Kushal Babel, Vincent Cheval, and Steve Kremer
A Survey of Attacks on Ethereum Smart Contracts (SoK) . . . . . . . . . . . . . . 164
Nicola Atzei, Massimo Bartoletti, and Tiziana Cimoli
Security Policies
Security Analysis of Cache Replacement Policies . . . . . . . . . . . . . . . . . . . . 189
Pablo Cañones, Boris Köpf, and Jan Reineke
Model Checking Exact Cost for Attack Scenarios. . . . . . . . . . . . . . . . . . . . 210
Zaruhi Aslanyan and Flemming Nielson
Postulates for Revocation Schemes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 232
Marcos Cramer and Giovanni Casini