124 lines
10 KiB
TeX
124 lines
10 KiB
TeX
\relax
|
|
\providecommand\zref@newlabel[2]{}
|
|
\providecommand\hyper@newdestlabel[2]{}
|
|
\providecommand\HyField@AuxAddToFields[1]{}
|
|
\providecommand\HyField@AuxAddToCoFields[2]{}
|
|
\citation{Lamport_1994,Holzmann_1997,Clarke_Wang}
|
|
\citation{Basin_Cremers_Dreier_Sasse_2022,Kobeissi_Nicolas_Tiwari,Blanchet_Jacomme,Basin_Linker_Sasse}
|
|
\citation{Hippel2022_anonym}
|
|
\providecommand \oddpage@label [2]{}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {I}Introduction}{1}{section.1}\protected@file@percent }
|
|
\newlabel{sec:introduction}{{I}{1}{Introduction}{section.1}{}}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {II}\textsc {Korg}\xspace Architecture}{1}{section.2}\protected@file@percent }
|
|
\newlabel{sec:design}{{II}{1}{\korg Architecture}{section.2}{}}
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {II-A}}Mathematical Preliminaries}{1}{subsection.2.1}\protected@file@percent }
|
|
\newlabel{sub:Mathematical Preliminaries}{{\mbox {II-A}}{1}{Mathematical Preliminaries}{subsection.2.1}{}}
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {II-B}}High-level design}{2}{subsection.2.2}\protected@file@percent }
|
|
\newlabel{sub:High-level design}{{\mbox {II-B}}{2}{High-level design}{subsection.2.2}{}}
|
|
\@writefile{lof}{\contentsline {figure}{\numberline {1}{\ignorespaces A high-level overview of the \textsc {Korg}\xspace workflow}}{2}{figure.caption.1}\protected@file@percent }
|
|
\providecommand*\caption@xref[2]{\@setref\relax\@undefined{#1}}
|
|
\newlabel{fig:korg_workflow}{{1}{2}{A high-level overview of the \korg workflow}{figure.caption.1}{}}
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {II-C}}Supported Attacker Models}{2}{subsection.2.3}\protected@file@percent }
|
|
\newlabel{sub:Supported Attacker Models}{{\mbox {II-C}}{2}{Supported Attacker Models}{subsection.2.3}{}}
|
|
\newlabel{lst:korg_drop}{{1}{2}{Example dropping attacker model gadget with drop limit of 3, targetting channel "cn"}{lstlisting.1}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {1}{\ignorespaces Example dropping attacker model gadget with drop limit of 3, targetting channel "cn"}}{2}{lstlisting.1}\protected@file@percent }
|
|
\citation{Holzmann_2014}
|
|
\citation{Holzmann_Smith_2000}
|
|
\citation{mcp}
|
|
\newlabel{lst:korg_replay}{{2}{3}{Example replay attacker model gadget with the selected replay limit as 3, targetting channel "cn"}{lstlisting.2}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {2}{\ignorespaces Example replay attacker model gadget with the selected replay limit as 3, targetting channel "cn"}}{3}{lstlisting.2}\protected@file@percent }
|
|
\newlabel{lst:korg_reordering}{{3}{3}{Example reordering attacker model gadget with the selected replay limit as 3, targetting channel "cn"}{lstlisting.3}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {3}{\ignorespaces Example reordering attacker model gadget with the selected replay limit as 3, targetting channel "cn"}}{3}{lstlisting.3}\protected@file@percent }
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {II-D}}\textsc {Korg}\xspace Implementation}{3}{subsection.2.4}\protected@file@percent }
|
|
\newlabel{sub:impl}{{\mbox {II-D}}{3}{\korg Implementation}{subsection.2.4}{}}
|
|
\newlabel{lst:io-file}{{4}{4}{Example I/O file targetting channel "cn"}{lstlisting.4}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {4}{\ignorespaces Example I/O file targetting channel "cn"}}{4}{lstlisting.4}\protected@file@percent }
|
|
\newlabel{lst:io-file-synth}{{5}{4}{Example gadget synthesized from an I/O file targetting the channel "cn"}{lstlisting.5}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {5}{\ignorespaces Example gadget synthesized from an I/O file targetting the channel "cn"}}{4}{lstlisting.5}\protected@file@percent }
|
|
\newlabel{lst:spin-model}{{6}{4}{Example \promela model of peers communicating over a channel. \texttt {!} indicates sending a message onto a channel, \texttt {?} indicates receiving a message from a channel}{lstlisting.6}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {6}{\ignorespaces Example \textsc {Promela}\xspace model of peers communicating over a channel. \texttt {!} indicates sending a message onto a channel, \texttt {?} indicates receiving a message from a channel.}}{4}{lstlisting.6}\protected@file@percent }
|
|
\newlabel{lst:drop_passer}{{7}{4}{Example dropping attacker model gadget with message skipping}{lstlisting.7}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {7}{\ignorespaces Example dropping attacker model gadget with message skipping}}{4}{lstlisting.7}\protected@file@percent }
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {II-E}}Usage}{4}{subsection.2.5}\protected@file@percent }
|
|
\newlabel{sub:Usage}{{\mbox {II-E}}{4}{Usage}{subsection.2.5}{}}
|
|
\citation{Cluzel_Georgiou_Moy_Zeller_2021,Smith_1997,Pacheco2022}
|
|
\citation{Pacheco2022}
|
|
\citation{Pacheco2022}
|
|
\citation{Woos_Wilcox_Anton_Tatlock_Ernst_Anderson_2016,Wilcox_Woos_Panchekha_Tatlock_Wang_Ernst_Anderson,Ongaro}
|
|
\citation{Ongaro}
|
|
\citation{Wilcox_Woos_Panchekha_Tatlock_Wang_Ernst_Anderson}
|
|
\newlabel{lst:abp}{{8}{5}{Example (simplified) \promela model of the alternating bit protocol}{lstlisting.8}{}}
|
|
\@writefile{lol}{\contentsline {lstlisting}{\numberline {8}{\ignorespaces Example (simplified) \textsc {Promela}\xspace model of the alternating bit protocol.}}{5}{lstlisting.8}\protected@file@percent }
|
|
\newlabel{lst:korg-shell}{{\mbox {II-E}}{5}{}{lstlisting.-1}{}}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {III}Case Studies}{5}{section.3}\protected@file@percent }
|
|
\newlabel{sec:case_studies}{{III}{5}{Case Studies}{section.3}{}}
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {III-A}}TCP}{5}{subsection.3.1}\protected@file@percent }
|
|
\newlabel{sub:TCP}{{\mbox {III-A}}{5}{TCP}{subsection.3.1}{}}
|
|
\newlabel{res:tcp-table}{{\caption@xref {res:tcp-table}{ on input line 28}}{5}{TCP}{figure.caption.7}{}}
|
|
\@writefile{lof}{\contentsline {figure}{\numberline {2}{\ignorespaces Automatically discovered attacks against our TCP model for $\phi _1$ through $\phi _4$. "x" indicates an attack was discovered, and no "x" indicates \textsc {Korg}\xspace proved the absence of an attack via an exhaustive search. These experiments were ran on a laptop with an eighth generation i7 and 16gb of memory. Full attack traces are available in the artifact.}}{5}{figure.caption.7}\protected@file@percent }
|
|
\newlabel{res:tcp-table}{{2}{5}{Automatically discovered attacks against our TCP model for $\phi _1$ through $\phi _4$. "x" indicates an attack was discovered, and no "x" indicates \korg proved the absence of an attack via an exhaustive search. These experiments were ran on a laptop with an eighth generation i7 and 16gb of memory. Full attack traces are available in the artifact}{figure.caption.7}{}}
|
|
\citation{Ongaro}
|
|
\citation{Woos_Wilcox_Anton_Tatlock_Ernst_Anderson_2016}
|
|
\citation{Hippel2022_anonym}
|
|
\citation{Hippel2022_anonym}
|
|
\@writefile{toc}{\contentsline {subsection}{\numberline {\mbox {III-B}}Raft}{6}{subsection.3.2}\protected@file@percent }
|
|
\newlabel{sub:Raft}{{\mbox {III-B}}{6}{Raft}{subsection.3.2}{}}
|
|
\newlabel{res:raft_table}{{\caption@xref {res:raft_table}{ on input line 91}}{6}{Raft}{figure.caption.8}{}}
|
|
\@writefile{lof}{\contentsline {figure}{\numberline {3}{\ignorespaces Breakdown of the attacker scenarios assessed with \textsc {Korg}\xspace against our buggy Raft \textsc {Promela}\xspace model, \texttt {raft-bug.pml}. In all experiments, the Raft model was set to five peers and the drop/replay limits of the gadgets \textsc {Korg}\xspace synthesized were set to two. We conducted our experiments on a research computing cluster, allocating 250GB of memory to each verification run. The full models and attacker traces are included in the artifact.}}{6}{figure.caption.8}\protected@file@percent }
|
|
\newlabel{res:raft_table}{{3}{6}{Breakdown of the attacker scenarios assessed with \korg against our buggy Raft \promela model, \texttt {raft-bug.pml}. In all experiments, the Raft model was set to five peers and the drop/replay limits of the gadgets \korg synthesized were set to two. We conducted our experiments on a research computing cluster, allocating 250GB of memory to each verification run. The full models and attacker traces are included in the artifact}{figure.caption.8}{}}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {IV}Proofs of Soundness and Completeness}{6}{section.4}\protected@file@percent }
|
|
\newlabel{sec:proofs}{{IV}{6}{Proofs of Soundness and Completeness}{section.4}{}}
|
|
\citation{Hippel2022_anonym}
|
|
\citation{Hippel2022_anonym}
|
|
\citation{Holzmann_1997}
|
|
\citation{Hippel2022_anonym}
|
|
\citation{Kozen_1977}
|
|
\citation{Kobeissi_Nicolas_Tiwari,Proverif,Tamarin,Cremers}
|
|
\citation{Blanchet_Jacomme,Pereira}
|
|
\citation{ParnoSOK,Basin_Cremers_Meadows_2018}
|
|
\citation{Khan_Mukund_Suresh_2005,Clarke_Wang,wayne_adversaries,Narayana_Chen_Zhao_Chen_Fu_Zhou_2006,Delzanno_Tatarek_Traverso_2014}
|
|
\citation{Wilcox_Woos_Panchekha_Tatlock_Wang_Ernst_Anderson,Castro_Liskov_2002,Delzanno_Tatarek_Traverso_2014}
|
|
\citation{Henda}
|
|
\citation{Ginesin}
|
|
\citation{TCPwn}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {V}Related Work}{7}{section.5}\protected@file@percent }
|
|
\newlabel{sec:Related Work}{{V}{7}{Related Work}{section.5}{}}
|
|
\@writefile{toc}{\contentsline {section}{\numberline {VI}Conclusion}{7}{section.6}\protected@file@percent }
|
|
\newlabel{sec:conclusion}{{VI}{7}{Conclusion}{section.6}{}}
|
|
\bibstyle{IEEEtran}
|
|
\bibdata{main}
|
|
\bibcite{Lamport_1994}{1}
|
|
\bibcite{Holzmann_1997}{2}
|
|
\bibcite{Clarke_Wang}{3}
|
|
\bibcite{Basin_Cremers_Dreier_Sasse_2022}{4}
|
|
\bibcite{Kobeissi_Nicolas_Tiwari}{5}
|
|
\bibcite{Blanchet_Jacomme}{6}
|
|
\bibcite{Basin_Linker_Sasse}{7}
|
|
\bibcite{Hippel2022_anonym}{8}
|
|
\bibcite{Holzmann_2014}{9}
|
|
\bibcite{Holzmann_Smith_2000}{10}
|
|
\bibcite{mcp}{11}
|
|
\bibcite{Cluzel_Georgiou_Moy_Zeller_2021}{12}
|
|
\bibcite{Smith_1997}{13}
|
|
\bibcite{Pacheco2022}{14}
|
|
\bibcite{Woos_Wilcox_Anton_Tatlock_Ernst_Anderson_2016}{15}
|
|
\bibcite{Wilcox_Woos_Panchekha_Tatlock_Wang_Ernst_Anderson}{16}
|
|
\bibcite{Ongaro}{17}
|
|
\bibcite{Kozen_1977}{18}
|
|
\bibcite{Proverif}{19}
|
|
\bibcite{Tamarin}{20}
|
|
\bibcite{Cremers}{21}
|
|
\bibcite{Pereira}{22}
|
|
\bibcite{ParnoSOK}{23}
|
|
\bibcite{Basin_Cremers_Meadows_2018}{24}
|
|
\bibcite{Khan_Mukund_Suresh_2005}{25}
|
|
\bibcite{wayne_adversaries}{26}
|
|
\bibcite{Narayana_Chen_Zhao_Chen_Fu_Zhou_2006}{27}
|
|
\bibcite{Delzanno_Tatarek_Traverso_2014}{28}
|
|
\bibcite{Castro_Liskov_2002}{29}
|
|
\bibcite{Henda}{30}
|
|
\bibcite{Ginesin}{31}
|
|
\bibcite{TCPwn}{32}
|
|
\@writefile{toc}{\contentsline {section}{References}{8}{section*.9}\protected@file@percent }
|
|
\gdef \@abspage@last{8}
|