本文采用的着色Petri网(Colored Petri Nets,CPN)是一种基于模型检测法的自动化建模技术,它引入了"颜色集"的概念,以扩展Petri网的表达能力。该技术利用着色Petri网及其配套的建模工具CPN Tools对安全协议进行建模,能够使得...本文采用的着色Petri网(Colored Petri Nets,CPN)是一种基于模型检测法的自动化建模技术,它引入了"颜色集"的概念,以扩展Petri网的表达能力。该技术利用着色Petri网及其配套的建模工具CPN Tools对安全协议进行建模,能够使得模型实现图形化和层次化,其内置的状态空间分析工具及CPN ML语言,能够高效地协助分析人员获取必要数据。本文以经典的密钥交换协议TMN为例,运用CPN方法对其进行形式化分析,成功识别出攻击者可能利用的攻击路径,并验证了协议中存在的安全漏洞。针对这些漏洞,本文提出了一种改进方法,经过验证,证实了该改进方法的有效性。展开更多
Aspect-oriented modeling can uncover potential design faults,yet most existing work fails to achieve both separation and composition in a natural and succinct way.This study presents an aspect-oriented modeling and an...Aspect-oriented modeling can uncover potential design faults,yet most existing work fails to achieve both separation and composition in a natural and succinct way.This study presents an aspect-oriented modeling and analysis approach with hierarchical Coloured Petri Nets(HCPN).HCPN has sub-models and well-defined semantics combining a set of submodels.These two characteristics of HCPN are nicely integrated into aspect oriented modeling.Submodels are used to model aspects while the combination mechanism contributes to aspects weaving.Furthermore,the woven aspect oriented HCPN model can be simulated and analyzed by the CPN Tools.A systematic web application case study is conducted.The results show the system original properties are satisfied after weaving aspects and all design flaws are revealed.As such,the approach can support web application design and analysis in an aspect-oriented fashion concisely and effectively.展开更多
In this work, Session Initiation Protocol model is established by using Timed Colored Petri Nets (TCPN). SIP (Session Initiation Protocol) is a protocol developed to assist in providing advanced telephony services acr...In this work, Session Initiation Protocol model is established by using Timed Colored Petri Nets (TCPN). SIP (Session Initiation Protocol) is a protocol developed to assist in providing advanced telephony services across the Internet. The Session Initiation Protocol (SIP) has become the quasi-standard for Voiceover-Internet Protocol (VoIP) communications. SIP is based on a client–server infrastructure in which user agents represent the end-terminals as clients, proxy servers handle SIP message routing between the user agents, and registrar servers store the client’s contact information into a location service. By use of timed color set and useful time attributes in tokens defined in CPN tools, timer and time-related problems of SIP are modeled and analyzed. Timer is an important part for SIP, especially the INVITE transaction.展开更多
文摘本文采用的着色Petri网(Colored Petri Nets,CPN)是一种基于模型检测法的自动化建模技术,它引入了"颜色集"的概念,以扩展Petri网的表达能力。该技术利用着色Petri网及其配套的建模工具CPN Tools对安全协议进行建模,能够使得模型实现图形化和层次化,其内置的状态空间分析工具及CPN ML语言,能够高效地协助分析人员获取必要数据。本文以经典的密钥交换协议TMN为例,运用CPN方法对其进行形式化分析,成功识别出攻击者可能利用的攻击路径,并验证了协议中存在的安全漏洞。针对这些漏洞,本文提出了一种改进方法,经过验证,证实了该改进方法的有效性。
基金supported by the NSF of China under grants No.61173048 and No.61300041Specialized Research Fund for the Doctoral Program of Higher Education under grant No.20130074110015+2 种基金the Fundamental Research Funds for the Central Universities under Grant No.WH1314038the Humanities and Social Science Research Planning Fund of the Education Ministry of China under grant No.15YJCZH201the Research Innovation Program of Shanghai Municipal Education Commission under grant No.14YZ134
文摘Aspect-oriented modeling can uncover potential design faults,yet most existing work fails to achieve both separation and composition in a natural and succinct way.This study presents an aspect-oriented modeling and analysis approach with hierarchical Coloured Petri Nets(HCPN).HCPN has sub-models and well-defined semantics combining a set of submodels.These two characteristics of HCPN are nicely integrated into aspect oriented modeling.Submodels are used to model aspects while the combination mechanism contributes to aspects weaving.Furthermore,the woven aspect oriented HCPN model can be simulated and analyzed by the CPN Tools.A systematic web application case study is conducted.The results show the system original properties are satisfied after weaving aspects and all design flaws are revealed.As such,the approach can support web application design and analysis in an aspect-oriented fashion concisely and effectively.
文摘In this work, Session Initiation Protocol model is established by using Timed Colored Petri Nets (TCPN). SIP (Session Initiation Protocol) is a protocol developed to assist in providing advanced telephony services across the Internet. The Session Initiation Protocol (SIP) has become the quasi-standard for Voiceover-Internet Protocol (VoIP) communications. SIP is based on a client–server infrastructure in which user agents represent the end-terminals as clients, proxy servers handle SIP message routing between the user agents, and registrar servers store the client’s contact information into a location service. By use of timed color set and useful time attributes in tokens defined in CPN tools, timer and time-related problems of SIP are modeled and analyzed. Timer is an important part for SIP, especially the INVITE transaction.
