Categorizing Attacks on Cryptographic Protocols Based on Intruders' Objectives and Roles

A taxonomy of cryptographic protocol attacks is helpful for cryptographic protocol analysis. There are taxonomies of cryptographic protocol awss5, 9] and a taxonomy of replay attacks in terms of message origin and destinationn25]. This paper presents an attack taxonomy based on an intruder's objectives when launching attacks and the roles s/he plays. Understanding an intruder's possible behavior and the roles s/he plays can beneet BAN-logic 4] as well as state machine-based cryptographic analysis approaches by allowing them to identify weakness and possible attacks on cryptographic protocols more eeciently. This paper also proposes several protocol design guidelines derived from the authors' observations while the taxonomy was exercised.