Security
There is an increasing variety of computer security research at Oxford, bridging Theory and Automated Verification and Software Engineering. Lowe and Roscoe continue to refine their seminal protocol analysis and verification techniques, which are now capable of verifying or refuting most protocols very rapidly using FDR in conjunction with front ends to support protocol notations, including SOAP. This work has been further expanded by Pavlovic's arrival. We also work in protocol development and information flow analysis. Achievements include discovery of attacks and other flaws in many protocols, including several which were at advanced stages of standardisation, such as GDOI and Webservice SecureConversation. Our protocol analysis tools, Casper and Pavlovic's Protocol Derivation Assistant, have become widely used in industry and international research. Roscoe's group developed a new family of protocols for bootstrapping ad-hoc networks, leading to three patent applications. Ker has recently proved a fundamental new result: that steganographic capacity grows as N0.5 rather than linearly.
Related seminar series
People
|
Faculty |
|
|
Students |
|
|
Past Members |
|
Selected Publications
| Analysing the Security Properties of Object−Capability Patterns Toby Murray PhD Thesis University of Oxford. 2010. |
| Analysing the Information Flow Properties of Object−Capability Patterns Toby Murray and Gavin Lowe In Proceedings of the Sixth International Workshop on Formal Aspects of Security and Trust (FAST2009). Vol. 5983 of Lecture Notes in Computer Science. Pages 81−95. 2010. Details | BibTeX | Download (pdf) | DOI (10.1007/978-3-642-12459-4_7) |
| Analysing Object−Capability Security Toby Murray In Proceedings of the Joint Workshop on Foundations of Computer Security‚ Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security (FCS−ARSPA−WITS'08). 2008. |
Links
Info
|
Themes |