Experience in cybersecurity shows that communication protocol design is exceptionally error-prone: security weaknesses often arise less from defects in cryptographic primitives than from flawed protocols, owing to the incorrect logical interplay among agents and potential adversaries in a network. Empirical evidence likewise suggests that `verification is only as sound as the language we used for it'. We propose computability logic (CoL) as a formal foundation for modelling, analysing and verifying secure communication protocols by treating specifications as interactive games between computational agents. We argue that CoL naturally captures protocol dynamics and formally identifies structural invariants that underlie classes of vulnerabilities and attacks. Moreover, its constructive character favours automated strategy extraction and synthesis of correct-by-construction executable artefacts from verification proofs while preserving the game-theoretic, interactive nature of protocols. We consider a CL4-based case study we presented at ITASEC 2026 to show the feasibility of our approach on representative protocol patterns, and outline theoretical and practical directions for extending the method to broader protocol families. This work in progress aims to advance logical verification methods for real-world secure communication.

On protocol security via computability logic / Perini Brogi, C., Spadoni, S., De Nicola, R.. - In: THE BULLETIN OF SYMBOLIC LOGIC. - ISSN 1079-8986. - (In corso di stampa).

On protocol security via computability logic

Perini Brogi Cosimo
;
Spadoni Stella;De Nicola Rocco
In corso di stampa

Abstract

Experience in cybersecurity shows that communication protocol design is exceptionally error-prone: security weaknesses often arise less from defects in cryptographic primitives than from flawed protocols, owing to the incorrect logical interplay among agents and potential adversaries in a network. Empirical evidence likewise suggests that `verification is only as sound as the language we used for it'. We propose computability logic (CoL) as a formal foundation for modelling, analysing and verifying secure communication protocols by treating specifications as interactive games between computational agents. We argue that CoL naturally captures protocol dynamics and formally identifies structural invariants that underlie classes of vulnerabilities and attacks. Moreover, its constructive character favours automated strategy extraction and synthesis of correct-by-construction executable artefacts from verification proofs while preserving the game-theoretic, interactive nature of protocols. We consider a CL4-based case study we presented at ITASEC 2026 to show the feasibility of our approach on representative protocol patterns, and outline theoretical and practical directions for extending the method to broader protocol families. This work in progress aims to advance logical verification methods for real-world secure communication.
In corso di stampa
File in questo prodotto:
File Dimensione Formato  
PeriniBrogi_Spadoni_DeNicola.pdf

embargo fino al 31/10/2027

Tipologia: Documento in Post-print
Licenza: Creative commons
Dimensione 148.94 kB
Formato Adobe PDF
148.94 kB Adobe PDF   Visualizza/Apri   Richiedi una copia

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/20.500.11771/43619
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus ND
  • OpenAlex ND
social impact