Please use this identifier to cite or link to this item:
https://www.um.edu.mt/library/oar/handle/123456789/113324
Full metadata record
DC Field | Value | Language |
---|---|---|
dc.date.accessioned | 2023-09-26T09:02:00Z | - |
dc.date.available | 2023-09-26T09:02:00Z | - |
dc.date.issued | 2023 | - |
dc.identifier.citation | Borg, K. (2023). Secure and correct execution of the X3DH protocol through runtime verification (Bachelor’s dissertation). | en_GB |
dc.identifier.uri | https://www.um.edu.mt/library/oar/handle/123456789/113324 | - |
dc.description | B.Sc.(Hons)(Melit.) | en_GB |
dc.description.abstract | The secure implementation of cryptographic protocols is essential for ensuring the confidentiality and integrity of sensitive information. Previous work has been devoted to the static verification of security protocol designs, utilizing techniques such as model checking and formal proof methods. These static verification techniques aim to analyse the design or source code of a system before execution to ensure its correctness and adherence to security properties. However, static verification often relies on implicit assumptions about the correctness of protocol implementations, which may not hold in practice. These assumptions can be particularly challenging for implementations that were not initially developed with formal verification in mind. To address this issue, this project proposes an approach that leverages runtime verifi‐ cation. Verifying runtime implementations is essential in distributed systems since errors which may not be detectable through static analysis can still introduce vulnerabilities into a system which can cause unexpected when running a distributed application on an unreliable network such as one located across multiple sites separated by vast distances or operated on different platform versions/configurations than anticipated during de‐ velopment testing stages. Furthermore, verifying implementations provides additional assurances against intentional attacks aimed specifically at compromising the security features offered by the protocol itself by preventing attackers from introducing subtle bugs directly into critical points within an application’s source code. To demonstrate the effectiveness of this approach, runtime verification is applied to the open‐source implementation python‐x3dh of the X3DH protocol, a decentralized key management system for end‐to‐end encryption. The protocol allows the estab‐ lishment of secure communication sessions between two or more parties without any prior knowledge of each other’s public keys. This makes it an attractive solution for ap‐ plications that need to use end‐to‐end encryption in a distributed environment, such as communications networks and peer‐to‐peer networks like protocols used by online messaging services. | en_GB |
dc.language.iso | en | en_GB |
dc.rights | info:eu-repo/semantics/restrictedAccess | en_GB |
dc.subject | Computer network protocols | en_GB |
dc.subject | Computer software -- Verification | en_GB |
dc.subject | Computer programming | en_GB |
dc.subject | Computer network protocols | en_GB |
dc.title | Secure and correct execution of the X3DH protocol through runtime verification | en_GB |
dc.type | bachelorThesis | en_GB |
dc.rights.holder | The copyright of this work belongs to the author(s)/publisher. The rights of this work are as defined by the appropriate Copyright Legislation or as modified by any successive legislation. Users may access this work and can make use of the information contained in accordance with the Copyright Legislation provided that the author must be properly acknowledged. Further distribution or reproduction in any format is prohibited without the prior permission of the copyright holder. | en_GB |
dc.publisher.institution | University of Malta | en_GB |
dc.publisher.department | Faculty of Information and Communication Technology. Department of Computer Science | en_GB |
dc.description.reviewed | N/A | en_GB |
dc.contributor.creator | Borg, Kirsty (2023) | - |
Appears in Collections: | Dissertations - FacICT - 2023 Dissertations - FacICTCS - 2023 |
Files in This Item:
File | Description | Size | Format | |
---|---|---|---|---|
2308ICTICT390700015525_1.PDF Restricted Access | 907.98 kB | Adobe PDF | View/Open Request a copy |
Items in OAR@UM are protected by copyright, with all rights reserved, unless otherwise indicated.