提出了一种用有色Petri网对安全协议建模,并通过模拟和对状态空间检测来发现协议漏洞的方法。利用这一方法对著名的Needham-Schroedor公钥协议建模,然后用CPN Tools实现并对协议进行检测,发现了协议存在的漏洞。应用结果表明,方法有效。
In this paper,we proposed a method which can check flaws in colored petri nets models of security protocols by simulating nets and state space analyse. We use this method to model the well-known Neodham-Schroodor Public Key Protocol, execute this model by CPN Tools and found a flow in this protocol. Application result shows that the method is efficient.