Towards Formal Analysis of Insider Threats for Auctions
|Title||Towards Formal Analysis of Insider Threats for Auctions|
|Publication Type||Conference Paper|
|Year of Publication||2016|
|Authors||Kammüller F., Kerber M., Probst C.W|
|Conference Name||Proceedings of the 2016 International Workshop on Managing Insider Security Threats, Vienna, Austria|
|Conference Location||New York|
This paper brings together the world of insider threats and auctions. For online-auction systems, like eBay, but also for high-value one-off auction algorithms as they are used for selling radio wave frequencies, the use of rigorous machine supported modelling and verification techniques is meaningful to prove correctness and scrutinize vulnerability to security and privacy attacks. Surveying the threats in auctions and insider collusions, we present an approach to model and analyze auction protocols for insider threats using the interactive theorem prover Isabelle. As a case study, we use the cocaine auction protocol that represents a nice combination of cryptographic techniques, protocols, and privacy goals suitable for highlighting insider threats for auctions.