Relating Multiset Rewriting and Process Algebras for Security Protocol Analysis

Stefano Bistarelli, Iliano Cervesato, Gabriele Lenzini, Fabio Martinelli

    Research output: Contribution to journalArticleAcademicpeer-review

    6 Downloads (Pure)


    When formalizing security protocols, different specification languages support very different reasoning methodologies, whose results are not directly or easily comparable. Therefore, establishing clear mappings among different frameworks is highly desirable, as it permits various methodologies to cooperate by interpreting theoretical and practical results of one system into another. In this paper, we examine the relationship between two general verification frameworks: multiset rewriting (MSR) and a process algebra (PA) inspired to CCS and the -calculus. Although defining a simple and general bi-jection between MSR and PA appears difficult, we show that the sublanguages needed to specify cryptographic protocols admit an effective translation that is not only trace-preserving, but also induces a correspondence relation between the two languages. In particular, the correspondence sketched in this paper permits transferring several important trace-based properties such as secrecy and many forms of authentication.
    Original languageUndefined
    Pages (from-to)3-47
    Number of pages45
    JournalJournal of computer security
    Issue number1
    Publication statusPublished - Feb 2005


    • METIS-220236
    • IR-48620
    • EWI-684

    Cite this