{"id":141,"date":"2010-01-24T11:18:26","date_gmt":"2010-01-24T11:18:26","guid":{"rendered":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/?p=141"},"modified":"2013-03-08T05:53:47","modified_gmt":"2013-03-08T05:53:47","slug":"metodos-formales-y-seguridad-en-la-red","status":"publish","type":"post","link":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/metodos-formales-y-seguridad-en-la-red\/","title":{"rendered":"M\u00e9todos formales y seguridad en la Red"},"content":{"rendered":"<p>Hoy publica &#8220;El Pa\u00eds&#8221; el art\u00edculo <a href=\"http:\/\/www.elpais.com\/articulo\/reportajes\/Espana\/blanco\/cuarenta\/ciberataques\/elpepusocdmg\/20100124elpdmgrep_1\/Tes\">Espa\u00f1a, blanco de m\u00e1s de cuarenta ciberataques<\/a>. El art\u00edculo es un reportaje sobre &#8220;la guerra de los ciberesp\u00edas&#8221; a ra\u00edz del <a href=\"http:\/\/www.elpais.com\/articulo\/reportajes\/fue\/gran\/ataque\/elpepusocdmg\/20100124elpdmgrep_2\/Tes\">ataque a Google<\/a>. Adem\u00e1s cuenta las iniciativas espa\u00f1olas para aumentar la seguridad.<\/p>\n<p>Desde sus inicios los <a href=\"http:\/\/en.wikipedia.org\/wiki\/Formal_methods\">m\u00e9todos formales<\/a> se han aplicado a aumentar la seguridad de los <a href=\"http:\/\/en.wikipedia.org\/wiki\/Life-critical_system\">sistemas cr\u00edticos<\/a> y, m\u00e1s generalmente, a la <a href=\"http:\/\/en.wikipedia.org\/wiki\/Security_engineering\">ingenier\u00eda de la seguridad<\/a>. Dado el uso de la Red, sus programas y servicios se est\u00e1n convirtiendo en sistemas cr\u00edticos y, por tanto, en campo de aplicaci\u00f3n de los m\u00e9todos formales. Muestra del inter\u00e9s de los sistemas de Red para los m\u00e9todos formales son la realizaci\u00f3n de tesis como las siguientes<br \/>\n<!--more--><\/p>\n<ol>\n<li> <a href=\"http:\/\/hissa.nist.gov\/~black\/Papers\/dissertation.pdf\">Axiomatic Semantics Verification of a Secure Web Server<\/a> (P.E. Black, 1998)\n<li> <a href=\"http:\/\/groups.csail.mit.edu\/cis\/theses\/pyoun-masters.pdf\">The Analysis of Cryptographic APIs Using The Theorem Prover Otter<\/a> (P. Youn, 2004).\n<li> <a href=\"http:\/\/theory.csail.mit.edu\/~cis\/theses\/amerson-masters.pdf\">Automated Analysis of Security APIs<\/a> (A.H. Lin, 2005).\n<li> <a href=\"http:\/\/cs.sunyit.edu\/~mathewn1\/files\/Thesis-Nick_Mathew.pdf\">Using a PVS Embedding of CSP to Verify Authentication Protocols<\/a> (B. Dutertre y S. Schneider, 1997).\n<li> <a href=\"http:\/\/citeseerx.ist.psu.edu\/viewdoc\/download?doi=10.1.1.51.946&#038;rep=rep1&#038;type=pdf\">Proving Properties of Security Protocols by Induction<\/a> (L.C. Paulson, 1997).\n<li> <a href=\"http:\/\/anzen.is.titech.ac.jp\/anzenmail\/AnZenMail.pdf\">AnZenMail: A secure and certified e-mail system<\/a> (E. Shibayama y als. 2002).\n<li> <a href=\"http:\/\/www.yl.is.s.u-tokyo.ac.jp\/~affeldt\/documents\/isss-paper.pdf\">Formalization and Verification of a Mail Server in Coq<\/a> (R. Affeldt y N. Kobayashi, 2003).\n<li> <a href=\"http:\/\/www.cl.cam.ac.uk\/TechReports\/UCAM-CL-TR-644.pdf\">Robbing the bank with a theorem prover<\/a> (C.P. Youn  y als. 2005).\n<li> <a href=\"http:\/\/homepage.cem.itesm.mx\/raulm\/pub\/iwsec06.pdf\">A Tool for Managing Security Policies in Organisations<\/a> (A.V. \u00c1lvarez, R. Monroy, J. V\u00e1zquez, 2006).\n<li> <a href=\"http:\/\/www-verimag.imag.fr\/~monin\/Talks\/bank-coq.pdf\">Defending the Bank with a Proof Assistant<\/a> (J. Courant y J.F. Monin, 2006).\n<li> <a href=\"http:\/\/alloy.mit.edu\/community\/files\/MPA-amerson-SPW07.pdf\">Modeling partial attacks with Alloy<\/a> (A. Lin, M. Bond y J. Clulow, 2007).\n<li> <a href=\"http:\/\/www.lsv.ens-cachan.fr\/Publis\/PAPERS\/PDF\/DKS-csf08.pdf\">Formal Analysis of PKCS# 11<\/a> (S. Delaune, S. Kremer y G. Steel, 2008).\n<li> <a href=\"http:\/\/www.cic.ipn.mx\/portalCIC\/s11\/vol12-01\/v12no1_Art05.pdf\">Formal Support to Security Protocol Development: A Survey<\/a> (J.C. L\u00f3pez Pimentel y R. Monroy, 2008).\n<\/ol>\n<p>Adem\u00e1s, hay series de congresos espec\u00edficos como<\/p>\n<ol>\n<li> <a href=\"http:\/\/www.avantssar.eu\/arspa-wits10\/\">ARSPA-WITS&#8217;10 (Joint Workshop on Automated Reasoning for Security Protocol Analysis and Issues in the Theory of Security)<\/a> que se celebrar\u00e1 en Paphos (Chipre) el 27 de Marzo.\n<li> <a href=\"http:\/\/www.score.cs.tsukuba.ac.jp\/~mmarin\/WWV2010\/\">WWV2010 (6th International Workshop on Automated Specification and Verification of Web Systems)<\/a> que se celebrar\u00e1 en Viena el 30 de Julio y se pueden mandar art\u00edculos hasta el 12 de Abril.\n<\/ol>\n","protected":false},"excerpt":{"rendered":"<p>Hoy publica &#8220;El Pa\u00eds&#8221; el art\u00edculo Espa\u00f1a, blanco de m\u00e1s de cuarenta ciberataques. El art\u00edculo es un reportaje sobre &#8220;la guerra de los ciberesp\u00edas&#8221; a ra\u00edz del ataque a Google. Adem\u00e1s cuenta las iniciativas espa\u00f1olas para aumentar la seguridad. Desde sus inicios los m\u00e9todos formales se han aplicado a aumentar la seguridad de los sistemas&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"footnotes":"","_jetpack_memberships_contains_paid_content":false},"categories":[164],"tags":[20,42,34,35,37,36],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":false,"_links":{"self":[{"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/posts\/141"}],"collection":[{"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/comments?post=141"}],"version-history":[{"count":10,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/posts\/141\/revisions"}],"predecessor-version":[{"id":3080,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/posts\/141\/revisions\/3080"}],"wp:attachment":[{"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/media?parent=141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/categories?post=141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.glc.us.es\/~jalonso\/vestigium\/wp-json\/wp\/v2\/tags?post=141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}