Author:
Aaron Hunter
Affiliation:
British Columbia Institute of Technology, Canada
Keyword(s):
Reasoning about Action, Information Security, Knowledge Representation.
Related
Ontology
Subjects/Areas/Topics:
Agents
;
Artificial Intelligence
;
Industrial Applications of AI
;
Knowledge Representation and Reasoning
;
Privacy, Safety and Security
;
Soft Computing
;
Symbolic Systems
Abstract:
We introduce a formal methodology for analysing the security of digital forms, by representing form signing procedures in a declarative action formalism. In practice, digital forms are represented as XML documents and the security of information is guaranteed through the use of digital signatures. However, the security of a form can be compromised in many different ways. For example, an honest agent might be convinced to make a commitment that they do not wish to make or they may be fooled into believing that another agent has committed to something when they have not. In many cases, these attacks do not require an intruder to break any form of encryption or digital signature; instead, the intruder simply needs to manipulate the way signatures are applied and forms are passed between agents. In this paper, we demonstrate that form signing procedures can actually be seen as a variation of the message passing systems used in connection with cryptographic protocols. We start with an exi
sting declarative model for reasoning about cryptographic protocols in the Situation Calculus, and we show how it can be extended to identify security issues related to digital signatures, and form signing procedures. We suggest that our results could be used to help users create secure digital forms, using tools such as IBM’s Lotus Forms software.
(More)