2007-01-26 13:59:15 +00:00
|
|
|
- (!!) Are the Arachne rules for keys that are variables sane? E.g. what
|
|
|
|
is their inverse key? Check!
|
2006-03-14 11:37:28 +00:00
|
|
|
- If no attack/state output is needed, maybe the attack heuristic should
|
|
|
|
be simpler (which means just weighting the trace length etc.) in order
|
|
|
|
to avoid uneccesary continuation of the search. Maybe even stop
|
|
|
|
altogether after finding *an* attack.
|
2005-12-09 13:15:34 +00:00
|
|
|
- For the TimeStamps etc, we can implement an 'auto-leak' of such local
|
|
|
|
constants. This should works also with a modifier of sorts (e.g.
|
|
|
|
'predictable') and such constants should be leaked to the intruder at
|
|
|
|
the start of the run, possibly by prefixing a send.
|
2004-04-23 11:58:43 +01:00
|
|
|
- The trace incremental search should start at something like 'distance of
|
|
|
|
first claim + SOMECONST * runs'. SOMECONST relates to the partial-order
|
|
|
|
induced trace prolonings.
|
|
|
|
- Because the properties checked are related to the partial order reductions,
|
|
|
|
it makes sense to check 'all secrecy claims' or 'all synchronisation claims'
|
2007-01-26 13:59:15 +00:00
|
|
|
at once. This holds in a similar way for arachne.
|
2004-04-23 11:58:43 +01:00
|
|
|
- Given originator assumptions and such, we might want to implement the
|
|
|
|
compiler, that for non-typed matching, it will ignore all type definitions
|
|
|
|
in the code (as in, putting them in stype, but still considering Function).
|
|
|
|
Then, for 'any agent' we can use stype silently. The modelchecker should
|
|
|
|
then always consider the types with -m0 and -m1.
|
|
|
|
- In a paper concerning the CASRUL compiler, they mention associativity for
|
|
|
|
the equality relations. Note that CASRUL restricts the intruder actions,
|
|
|
|
and sometimes uses approximations.
|
|
|
|
- Several memory leak detectors are still in place, they can all be located by
|
|
|
|
searching for "lead" or "diff" and destroying the code.
|
|
|
|
- knowledgeAddTerm might be improved by scanning through key list only with
|
|
|
|
things that are newly added.
|