Towards Formal Analysis of Insider Threats for Auctions

TitleTowards Formal Analysis of Insider Threats for Auctions
Publication TypeConference Paper
Year of Publication2016
AuthorsKammüller F., Kerber M., Probst C.W
Conference NameProceedings of the 2016 International Workshop on Managing Insider Security Threats, Vienna, Austria
Date PublishedOctober
Conference LocationNew York

This paper brings together the world of insider threats and auctions. For online-auction systems, like eBay, but also for high-value one-off auction algorithms as they are used for selling radio wave frequencies, the use of rigorous machine supported modelling and verification techniques is meaningful to prove correctness and scrutinize vulnerability to security and privacy attacks. Surveying the threats in auctions and insider collusions, we present an approach to model and analyze auction protocols for insider threats using the interactive theorem prover Isabelle. As a case study, we use the cocaine auction protocol that represents a nice combination of cryptographic techniques, protocols, and privacy goals suitable for highlighting insider threats for auctions.