Powered by OpenAIRE graph
Found an issue? Give us feedback

GASP

a Generic Approach to Secure network Protocols
Funder: French National Research Agency (ANR)Project code: ANR-19-CE39-0001
Funder Contribution: 184,298 EUR
Description

In today's connected world, we heavily rely on network protocols to communicate with one another. To ensure the confidentiality and integrity of the exchanged data, we need to assess and improve the security of these protocols and their implementation. This observation obviously concerns so-called security protocols, such as TLS and SSH, but it is also important to consider high-level, complex, application-level protocols, such as HTTP/2 and lower-level protocols such as DNS or BGP. Security flaws are indeed pervasive in network protocols, at the specification level or due to implementation flaws: incomplete specification, memory corruption bugs, logical errors, state machine shortcuts, cryptographic attacks, etc. The GASP project proposes a generic framework to describe protocols and automatically derive tools. We will first define a description language for messages, and derive parsers and scanning tools. Then, we will design languages to describe state machines, from which reference implementations can be derived. Finally, we will develop protocol fuzzers and test existing implementations. Our goal is thus to provide a generic approach to secure protocols, from observation to implementation to testing. The short-term impact of the project would be to improve the knowledge about protocol deployment and implementations. We will also aim at sharing the produced tools as well as the data collected and results obtained during the project. In the long run, the proposed languages could help produce better specifications and improve the time of development for protocol stacks.

Data Management Plans
Powered by OpenAIRE graph
Found an issue? Give us feedback

Do the share buttons not appear? Please make sure, any blocking addon is disabled, and then reload the page.

All Research products
arrow_drop_down
<script type="text/javascript">
<!--
document.write('<div id="oa_widget"></div>');
document.write('<script type="text/javascript" src="https://www.openaire.eu/index.php?option=com_openaire&view=widget&format=raw&projectId=anr_________::499f6350268ec118d2ab6f6302091c86&type=result"></script>');
-->
</script>
For further information contact us at helpdesk@openaire.eu

No option selected
arrow_drop_down