Detail publikačního výsledku

Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding

HENZL, M.; HANÁČEK, P.

Originální název

Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding

Anglický název

Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding

Druh

Stať ve sborníku mimo WoS a Scopus

Originální abstrakt

We present a method of automated vulnerability finding in protocols that use contactless smart cards. We focus on smart cards with contactless interface because they are simpler than their counterparts with contact interface and provide less functionality, which can be modeled more easily. Our method uses model checking to find possible attacks in a model of the protocol implementation on particular smart card. There is a possibility to model arbitrary smart card, we demonstrate this method on one of the currently most widespread contactless smart cards - the Mifare DESFire. Using our method we were able to locate a couple of weaknesses of this smart card which may cause vulnerability if the protocol is not implemented properly. This method can be used by developers to evaluate security of their protocol implementation on particular smart card.

Anglický abstrakt

We present a method of automated vulnerability finding in protocols that use contactless smart cards. We focus on smart cards with contactless interface because they are simpler than their counterparts with contact interface and provide less functionality, which can be modeled more easily. Our method uses model checking to find possible attacks in a model of the protocol implementation on particular smart card. There is a possibility to model arbitrary smart card, we demonstrate this method on one of the currently most widespread contactless smart cards - the Mifare DESFire. Using our method we were able to locate a couple of weaknesses of this smart card which may cause vulnerability if the protocol is not implemented properly. This method can be used by developers to evaluate security of their protocol implementation on particular smart card.

Klíčová slova

contactless smart card, security, vulnerability, model, Mifare DESFire

Klíčová slova v angličtině

contactless smart card, security, vulnerability, model, Mifare DESFire

Autoři

HENZL, M.; HANÁČEK, P.

Rok RIV

2014

Vydáno

05.07.2013

Nakladatel

IEEE Computer Society

Místo

Chengdu

ISBN

978-0-7695-5010-7

Kniha

2013 International Symposium on Biometrics and Security Technologies (ISBAST)

Strany od

141

Strany do

148

Strany počet

8

Plný text v Digitální knihovně

http://hdl.handle.net/

BibTex

@inproceedings{BUT104512,
  author="Martin {Henzl} and Petr {Hanáček}",
  title="Modeling of Contactless Smart Card Protocols and Automated Vulnerability Finding",
  booktitle="2013 International Symposium on Biometrics and Security Technologies (ISBAST)",
  year="2013",
  pages="141--148",
  publisher="IEEE Computer Society",
  address="Chengdu",
  isbn="978-0-7695-5010-7"
}