Protocol, Mobility and Adversary Models for the Verification of Security

132 Pages·2016·9.46 MB·English

ITLicentiatetheses
2016-007
Protocol, Mobility and Adversary Models for
the Verification of Security
VOLKAN CAMBAZOGLU
UPPSALAUNIVERSITY
DepartmentofInformationTechnology

Protocol,MobilityandAdversaryModelsfortheVerificationofSecurity
VolkanCambazoglu
[email protected]
July2016
DivisionofComputerSystems
DepartmentofInformationTechnology
UppsalaUniversity
Box337
SE-75105Uppsala
Sweden
http://www.it.uu.se/
DissertationforthedegreeofLicentiateofPhilosophyinComputerScience
c VolkanCambazoglu2016
�
ISSN1404-5117
PrintedbytheDepartmentofInformationTechnology,UppsalaUniversity,Sweden

Abstract
The increasing heterogeneity of communicating devices, ranging
from resource constrained battery driven sensor nodes to multi-
core processor computers, challenges protocol design. We exam-
inesecurityandprivacyprotocolswithrespecttoexteriorfactors
such as users, adversaries, and computing and communication
resources; and also interior factors such as the operations, the
interactions and the parameters of a protocol.
Users and adversaries interact with security and privacy proto-
cols, and even a↵ect the outcome of the protocols. We propose
user mobility and adversary models to examine how the location
privacyofusersisa↵ectedwhentheymoverelativetoeachother
in specific patterns while adversaries with varying strengths try
to identify the users based on their historical locations. The loc-
ation privacy of the users are simulated with the support of the
K-Anonymity protection mechanism, the Distortion-based met-
ric, and our models of users’ mobility patterns and adversaries’
knowledge about users.
Security and privacy protocols need to operate on various com-
puting and communication resources. Some of these protocols
can be adjusted for di↵erent situations by changing parameters.
A common example is to use longer secret keys in encryption for
stronger security. We experiment with the trade-o↵ between the
security and the performance of the Fiat-Shamir identification
protocol. We pipeline the protocol to increase its utilisation as
the communication delay outweighs the computation.
A mathematical specification based on a formal method leads
to a strong proof of security. We use three formal languages
with their tool supports in order to model and verify the Se-
cure Hierarchical In-Network Aggregation (SHIA) protocol for
Wireless Sensor Networks (WSNs). The three formal languages
specialise on cryptographic operations, distributed systems and
mobile processes. Finding an appropriate level of abstraction to
represent the essential features of the protocol in three formal
languages was central.
i
ii
Acknowledgments
IwouldliketothankmysupervisorsChristianRohner,PerGunningbergand
Bj¨orn Victor. Among my three supervisors I spent the longest time with
Christian Rohner whose dedication and encouragement have always been
essential for my development as a PhD student. He is one of the important
reasons why I decided to become a PhD student in the Communication
Research (CoRe) group. I have always been very grateful to work with him.
It has been a great experience to interact with members of CoRe, Mobil-
ity, Uppsala Networked Objects (UNO), and Signals and Systems research
groups.
Special thanks to my wife Deha and my family who have always suppor-
ted me through good and bad times.
iii
iv
List of Papers
This thesis is based on the following papers
I Volkan Cambazoglu, Christian Rohner, and Bj¨orn Victor. 2012. The
impact of trace and adversary models on location privacy
provided by K-anonymity. In Proceedings of the First Workshop
onMeasurement, Privacy, andMobility(MPM’12). ACM,NewYork,
NY, USA.
II Volkan Cambazoglu & Christian Rohner. 2013. Towards Adaptive
Zero-Knowledge Protocols: A Case Study with Fiat-Shamir
Identification Protocol. In Proceedings of the Ninth Swedish Na-
tional Computer Networking Workshop (SNCNW 2013). Lund,
Sweden.
III VolkanCambazoglu,Ramu¯nasGutkovas,Johannes˚AmanPohjolaand
Bj¨ornVictor. Modelling and Analysing a WSN Secure Aggreg-
ation Protocol: A Comparison of Languages and Tool Sup-
port. Technical Report no: 2015-033, Department of Information
Technology, Uppsala University, 2015.
v
vi